CAPE Sandbox

Detection(s): BlackBasta

Category	Started On	Completed On	Duration	Cuckoo Version
FILE	2024-09-04 09:06:34	2024-09-04 09:11:10	276 seconds	2.4-CAPE

Machine	Label	Manager	Started On	Shutdown On
win10	win10	KVM	2024-09-04 09:06:34	2024-09-04 09:11:09

File Details

Filename	BlackBasta_03.exe
File Type	PE32+ executable (console) x86-64, for MS Windows
File Size	733696 bytes
MD5	ac625552601c190656dcb8cf4c21cd1d
SHA1	acad7a91c2812a0652d62f252774454c217666e9
SHA256	03309c90e6c60a2e3cd44374efa3003ae10cd9e05ba6a39c77aa5289b32cb969 [VT] [MWDB] [Bazaar]
SHA3-384	053a729ab54543324beda7a925e60fa2bbcd17dc12a46a8904763bf55b39207e8653fb09e1ea24aff0d3698e67cd07a1
CRC32	AA53D04A
TLSH	T100F47C2A779C01F8E177D2798C954646F7F17C0613615BCF83A04AAA2F2F6B41E7A390
Ssdeep	12288:nB6xrkyoUKbidQN0M2TNK36YPiCuL1+jZ5tXdAD6x/NJxaZUzrd9gW6PdrO5SAou:nwrkyoUGJJgWQrOUAua
Yara	INDICATOR_SUSPICIOUS_GENRansomware - detects command variations typically used by ransomware - Author: ditekSHen
PE	Strings

	OpenMutexW ATAVAWH .?AVerror_category@std@@ T$<9T$8 99~CE 8\uKH; th-TH fD94Q} delete es-EC .?AV?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ :\u9I GetVolumePathNamesForVolumeNameW 6,R )D$@f bs-ba-latn D$Pf; es-VE \$@E; \$<Ic `default constructor closure' j>>A?1 9Cu,fD9y C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet @A_A^A]A\_ ar-LY T$`A9r .rdata &?PPPPPPP? tpH91uk c?FA@s} 0A_A^A]A\_^[ fC9Du H9D$P l$HD8G ,H0JB9 remoteregistry A_A^A]A\_ \|$ E3 pA_A^A\_^[] H;D$@s_H hi-IN GetFileSizeEx @UAVAWH sq-AL l$@A_A^A]A\_^ fD9$wu LC_NUMERIC en-us \|$hH; @USWH A^_[ u~9t$Xt vAD8s(t < t <$ SetEnvironmentVariableW ntdll \|$ ATAVAWH `A_A^A]A\_][ D$`f; GetTickCount64 8\u9I D8\|$1u D8[(u ,R%ku CoInitializeSecurity gl-ES L$bL; A_A^A]_[ oKP;e .CRT$XTZ <requestedPrivileges> @_RDATA L9=G/ -bomb it-ch .?AV_com_error@@ nn-no n]?iJ \$gm? .>PJ;I:qE> broken pipe ar-AE pW4H APD90~ R,VTZ,\.^,b L$PH3 .?AV?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ ca-ES EH?H bad address \$ UVAWH A8L90t ar-sy ur-PK EM/M+ conhost.exe 'L-,e u,9\$0~LL address family not supported czech t$HE8U g'#~cR GetDateFormatEx hr-ba Pmluc f#D$@H Q5rHg,> ext-ms- ;D$ t -forcepath />58d% Application Data Vr.>T da-DK t-Lck 0A_A^A\ GetStartupInfoW ?8bunz8 AllocateAndInitializeSid ( zh-cht SleepConditionVariableSRW -nomutex et-ee %H : %M A_A]A\ xh-ZA ar-sa SUVWATAVAWH v+t RtlCaptureContext inappropriate io control operation no message ot$ H hr-hr `eh vector copy constructor iterator' CT$XH )D$`H @.data en-NZ \|$(A^ 8e:?C L9=3: A_A^^ K(sL<s termservice H95<8 G L;C u L$@H3 ar-om fD94iu l$hA8_ __unaligned .?AVsystem_error@std@@ RtlLookupFunctionEntry pl-pl T$<E3 spanish-uruguay (t$ A ar-jo L9=8; A+P@H u4D9v lv-lv 0A_A^A]A\_^] 0A_A^_ fB94ht H3E H3E en-gb ns-za __eabi CloseThreadpoolWait zh-MO be-by he-IL \DefaultIcon ko-KR r:f;\$\| L$0fI .?AV?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ ;;D:8 D$HL9gXt sr-BA-Cyrl mwtMH fr-CH K0HcQ `eh vector destructor iterator' fA9,@u D$0ta CopyFileW fE9!fA sma-se mk-MK samss en-ph spanish-peru sl-si t$8H+ t$0;/~ holland MoveFileW es-PE A_A^A]A\_^] \$ VAVAWH _cabs p[WPN \|$ UAVAWH T$PD+ D$0tj .?AV_Facet_base@std@@ \|$PE3 p0R^G' +L$DA wGHcN -sf32 .CRT$XCU t$ WATAUAVAWH t[fff L9=BJ .rtc$TAA l$8E3 DeleteCriticalSection !H+}0 .rtc$IZZ ar-bh de-at ?QY^& GetLastError @84)u D$pf; CT$`H english-aus t$4Ic D$`9X .?AV_System_error@std@@ H954E sms-FI Z\>z8 es-GT \$ VWATAUAVH D8T$1u \$ WH too many files open `omni callsig' puerto-rico IsValidLocaleName es-BO \|$ UH t$`L# <%ucI 0A^_^ fD9t$b `string' <Ct-<D 0123456789-+Ee \|$0H; Bmluc vctip.exe es-mx L,N0P"N HcS H .rtc$TZZ (t$PH ole32.dll rbf;\$l UnVWg not supported restrict( spanish-mexican \|$0E3 ^,tyI 8_^][ GetConsoleOutputCP ar-OM s AWH V:::: <:w]H h>1my ml-in .CRT$XPZ G H;G es-uy sr-ba-cyrl .rdata$T f;\$4 TryAcquireSRWLockExclusive Local Settings LocalAlloc S>$hkDh$h>[2 tn-ZA cross device link CONOUT$ __cdecl .?AV?$moneypunct@_W$00@std@@ PA_A^A]A\_^] .?AV?$codecvt@GDU_Mbstatet@@@std@@ StO9>T spanish-ecuador network reset english-caribbean %.0Lf serviceHub.dataWarehouseHost.exe (D$`H f;\$4r es-cr Il?333333c? >jtm}S file exists \|$HE3 new-zealand <+uaH zh-SG VWAUAVAWH l$ VWATAVAWH sms-fi quz-PE az-az-cyrl trinidad & tobago `dynamic atexit destructor for ' .rtc$IAA $mluc >H;\|$P D$`I9 x ATAVAWH u1!D$0H (taY/ de-LU se-no fD9"u %H : %M : %S es-pa __swift_1 3>N;kU F8$8u @A^A]A\_^ fA99} CreateSemaphoreW u%@8j(t .?AVlength_error@std@@ D81uUL9r !0Ap@`"P spanish-costa rica __swift_2 ]>)2X !>6'Y de-de AreFileApisANSI netsvcs L$ E3 L$0f; en-US .?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@ tt-ru <+uXH \|$ L+ vaultsvc 8D$8u<H wwwwwwww gl-es A_A^_ ,PKUbg .?AVios_base@std@@ @A_A^A]A\_^[ HHtgD FreeLibraryWhenCallbackReturns tyfD9 tsH FindClose (D$0f GetFileType dlaksjdoiwq.jpg cR^cR HcO H resource deadlock would occur timed out gu-in FindNextVolumeW D$P%H sv(E3 A_A^A\_^ 9D$Pu L$8H3 english-south africa nl-NL SetUnhandledExceptionFilter CWD>~3 GetFileAttributesExW A_A^_^[] 0iN>/ connection refused :\uKL; H9L$Ht?H \|b=})> +v$x+v$xv$+xv+$xv$+x+$vx+$vx$v+x+$vx$+vx+v $+v $v $+v +$v $++$ v+$ v$ v++$ v$+ v+xv$+ v$v$ +v+ $v$ ++x$v+ $v$v ++ $v$ +v (t$`H y\PD>! 9\uBH d$ UAVAWH rKf;\$t sr-sp-cyrl already connected netlogon u$D8r(t x UAVAWH $D8T$2u \|$xL; )D$`M A_A^A\_^ t$@A; 3Wl{7 fD9!H .CRT$XIAC .?AVlogic_error@std@@ L$0fH tr-tr de-DE f9<H} utKf; zh-CHS A8^8}SD D$pfA; ,HR>O zh-cn .idata$3 t$XE3 D8T$3uVH executable format error SetThreadpoolTimer GetLocaleInfoW \|$@-D en-cb p WAVAWH L!\|$(L! f;\$<r slovak SleepConditionVariableCS D$Xf; bp(=>?g SetEndOfFile CreateEventExW ;H9>&X NAN(IND) CloseThreadpoolWork GetExitCodeThread HA_A^A]A\_^][ D8i(u hr-BA SetSecurityDescriptorDacl ffffff OLEAUT32.dll @8k(t PATH3 australian fr-lu api-ms-win-security-systemfunctions-l1-1-0 .?AVtype_info@@ f9<Au t$HD8D$0t quz-EC svchost.exe \$@H; E8q(u el-gr ((((( H T$XH; keyiso french-belgian kernel32 dddd, MMMM dd, yyyy L$HH3 ~,u<I SetFileSecurityW .CRT$XIA quz-pe l$xM+ es-ES L9=_F quz-bo ReadConsoleW A>pP& D$2fE TlsFree hong-kong .?AV?$moneypunct@G$0A@@std@@ not a stream L$@L+N api-ms-win-core-xstate-l2-1-0 pl-PL winlogon.exe D$8f; ;\$p\| A8H90t v}`[> bad cast spanish-modern A>l$/ T$@I; D$0H# fJBGo A_A^] (\|$0@ OHKGb FreeEnvironmentStringsW ExitThread December UTF-16LEUNICODE .?AV?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ A_A^A] obwQ4 .?AV?$moneypunct@D$0A@@std@@ $dmnd .rsrc$02 sma-SE \$pH; zu-za CL$(L+ .?AV?$_Iosb@H@std@@ spanish-chile L$xf; minkernel\crts\ucrt\inc\corecrt_internal_strtox.h A__^][ HcK H l$4D8t$2u es-CL <0ugH C H;C GetExitCodeProcess !_is_double D$0H+ :>t6k' c [1>H' FlushProcessWriteBuffers en-za german-lichtenstein USER32.dll fr-ca Ct$8H t$PE8] \$1D8W api-ms-win-core-fibers-l1-1-1 winmgmt gTRC 8-uGH CreateSymbolicLinkW not connected cy-GB spanish-bolivia uz-uz-latn YD$@f +h->\| .?AV?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ D;t$@} <:wbH smn-fi D$pE3 NAN(SNAN) __ptr64 HeapFree it-CH rundll32.exe x}UYyW FormatMessageA lanmanserver OF>;^ ar-kw HHtbH D$HI; __fastcall CreateMutexW T$8A; ar-ma pa-IN en-TT L!d$(L!d$@D rpclocator fB9<Bu A^][ L$@uU Wednesday rpcss H WATAUAVAWH A_A]A\_^[ nl-BE GetVolumeInformationW cmd.exe raB3G 9\|$<} mk-mk b?^Cy dcomlaunch FlsFree .:e(: .pdata sv2E3 \?GUn- 8A^A]_[ be-BY L$&8\$&t,8Y Input is not valid base64-encoded data. L$0H3 .?AV_Generic_error_category@std@@ zh-TW .?AVfailure@ios_base@std@@ A^_^ L?UUUUUUU? @SUVWH ~ $s%r api-ms-win-core-datetime-l1-1-1 N>O=I9 div-mv UWATAWH ?7zQ6$ j?{$ D$8D8T$1 RaiseException tUH95 VWAUH tokenbroker l$0D+ D9 file too large fB9<{u :\tRI UWAVH .?AU_Crt_new_delete@std@@ ,X< w ?!5WOo WaitForThreadpoolTimerCallbacks u9!\$0 D$@f; V6E>`"(5 es-AR fD9<Hu GetACP H+L$(x<H .?AVfilesystem_error@filesystem@ghc@@ H[><y5 pr-china l$ E3 HcE_H operator "" H9=' 9\t!L _logb SystemFunction036 mscoree.dll L9=J= SVWATAUAWH f;\$D SVWAVH \$0E3 QueryPerformanceCounter L$pf; .?AV?$codecvt@DDU_Mbstatet@@@std@@ en-PH GetSystemTimeAsFileTime LC_MONETARY ..om? tr-TR .?AVstl_critical_section_vista@details@Concurrency@@ ReleaseSRWLockExclusive l$@A9F ERRRRRRRROr %i LoadLibraryExW D$PH; 9\uyE oI>O7 tvLcs %I : %M : %S %p -d42h PA^_] hu-HU WLDAP32.dll s9e(N destination address required CoCreateInstance @A^A\_ D$@M; fr-be L;K u>M ?@En[vP ReturnValue en-zw \|$ H; L$Pf; @.rsrc @SUVATAUH SUVWAWH E/uaH @cprt L$PL; es-DO ar-QA BF>^G .?AV?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@ E>nEA message size ENCRYPTION sr-SP-Cyrl A^_^[] `local vftable' ,/<-w pa-in \$ UVWH britain TlsGetValue __stdcall January t'HcW A9,A$ )D$`f GetNativeSystemInfo eu-es coremessagingregistrar es-co (d&. WAVAWH ru-ru se-se L$ UVWATAUAVAWH ar-TN L$ \|+L; LC_TIME se-FI en-IE .00cfg PJCf* f9)u4H9j quz-ec C H9C en-ZW X @8u November </assembly> `dynamic initializer for ' RtlUnwind operation not permitted english-nz GetSystemTimePreciseAsFileTime f;\$T HcQ<H LCIDToLocaleName serviceHub.host.clr.x64.exe sw-KE B(I9A( fi-fi UTF-8 }HfD9#A p AWH +f)>0' t$ WAVAWH D$2E3 \|$0A_A^ (t$ H CreateThreadpoolWork D$P%I l$ A9)v@H l$0I9h InitializeSRWLock \$$3} es-NI A_A^A\_^][ ,rXYZ .rdata$r A^^[ MultiByteToWideChar hr-HR ar-IQ api-ms- api-ms-win-core-sysinfo-l1-2-1 '>999 MT$@L .?AUtime_base@std@@ fB9<@u GetTimeFormatW D$0@8{ string too long A_A^A]A\_ 8Ht;I L$8f; bs-BA-Latn connection reset ja-JP sma-NO tYH;9t l$0E3 tEHcR 0A^A\_^[ sr-BA-Latn .tls$ \$ fD April \|$8L; `vector copy constructor iterator' A_A^A]A\_^[ pA_A^A]A\_^] mt-mt .?AVcodecvt_base@std@@ L;C u value too large bad file descriptor XA_A^A]A\_^][ zh-chs t$DA; <:wXH D$PH+ A_A\_] `managed vector destructor iterator' 8\tRI `vector vbase constructor iterator' \$1D8O CreateFileW CreateSemaphoreExW bad message invalid hash bucket count 0123456789ABCDEFabcdef-+XxPp u<g~l<it[<ntP<ot,<pt no link xWI96tRI n03>Pu api-ms-win-appmodel-runtime-l1-1-2 SHELL32.dll kk-kz d$IfD UUUUUU ios_base::failbit set d$4E3 $< t6<$t,<+t"<vt E80t"A .dc=app,dc=net Friday ky-KG GetCurrentDirectoryW rNf;\$t es-UY frexp D8yhu invalid vector subscript UVWAVAWH August A_A^A\_] FlsSetValue 8\uPH; .?AV?$codecvt@_WDU_Mbstatet@@@std@@ CT$XL t$0A^_ D8T$2 A8}(u H;5mK msvsmon.exe D$hf; fi-FI 80tWD MT$HL .xJ>Hf e+000 GetOEMCP L$Xf; TerminateProcess se-fi Y>kX>M HcUoL es-py GetLocaleInfoEx smj-SE D$18F(u @A_A^A] ~jA;9~ UVWATAWH spanish-panama { AVH t$4E3 CreateThreadpoolTimer gmp_default_alloc: Virtual memory exhausted. InitializeSListHead D$HH+ A9<Fu C>TQ BC?>6t9^ )D$ L gmp_default_realloc: Virtual memory exhausted. u/HcH<H E0HcH Zod(^? L$ WH tDE3 uz-uz-cyrl american NTUSER.DAT state not recoverable .?AV?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ [chrm rsf;\$d D84:u :u A8N england kn-IN .rdata$zzzdbg (samAccountType=805306369) </security> D8l$pt A_A^A]A\_^] de-lu GetModuleHandleExW !"#$%&'()+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~ fa-IR ar-ae l$HL9n October ResetEvent LcA<E3 chinese-traditional \|$8tiI H9E'H 9\$hu A_A^A]A\_^[] l$ WATAVH _RDATA ar-LB fr-LU APD9(~ 0A_A^A\_^][ 9\tHI =>oNHj am/pm "e?<<<<<<l? ReleaseMutex GetCommandLineW _is_double 8D$@t f9t$bu `vector vbase copy constructor iterator' it-it t$@A_A^A]A\_ #IN%[ UATAUAVAWH D$0I; \$8H; D$pHc 0><[cZUg^> D!l$xA SUVWAVH mr-IN mi-nz `virtual displacement map' svDE3 ns-ZA L$4\|?L Your data are stolen and encrypted H97u+A no child process APD98~ .CRT$XIAA @A_A^A\_^ I+4$H ar-tn d$0D9\|$` __crt_strtox::floating_point_value::as_double en-bz api-ms-win-rtcore-ntuser-window-l1-1-0 (D$`L no protocol option chinese-simplified 8-uCH es-sv L$ WATAUAVAWH bTRC GetComputerNameExW 9^ t"H 0A^A\_ t7HcP VWATAVAW D8}?t E0Lc` .?AV?$collate@G@std@@ < t=< ar-DZ t?HcS +M<7> .text$mn gfffffff .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ ExitProcess L$@f; d<-u`H H9=oD .?AV?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ 6acspAPPL H9=bm [aOni{ February .CRT$XLA de-AT %m / %d / %y A_A]A\_^[] H9D$8t% unordered_map/set too long operation canceled ar-dz FlsAlloc ro-RO KERNEL32.dll A8L98t uW;S ldexp sa-IN F>qUxv false :\u8H t$pE3 t$0E3 api-ms-win-core-winrt-l1-1-0 .?AUctype_base@std@@ @SUVWATAVAWH Stuf; tn-za Your company id for log in: 5f19e2b1-ca23-4d1d-b642-de2543c02742 ar-eg Forced path: %ls 0A__^[] t%fE9 english-american th-th zh-tw K&>.yC vector too long pt-PT L$<A; \|$(E3 A_A^A]_^ fffff \|$(M; @A_A^A\_^[] VWAWH SNAN) t$ UWAUAVAWH `udt returning' GetTickCount D$ I; ext-ms-win-ntuser-dialogbox-l1-1-0 italian-swiss d$dD;d$ltY A_A^A\_^[] D$PL; 0X8b?~ ?{Q}< portuguese-brazilian D$@H;F __vectorcall D$(E3 fD9$Hu Force path o\|$0f 68:HP expaL H9D$8t0 function not supported <}wTI ADVAPI32.dll Sunday gu-IN .CRT$XPX `vector deleting destructor' `vector constructor iterator' f;\$< GetCPInfo L$(H3 nb-no <St[@: FindFirstFileExW VWATAVAWH \|$HH; sv-se fE9<Au VWAVH )\|B?d! SVWATAVH pA_A^A]A\_^[ Done time: %.4f seconds, encrypted: %.4f gb You can contact us and decrypt one file for free on this TOR site tSf91tNH zu-ZA .?AUmoney_base@std@@ C:\Windows\System32\vssadmin.exe delete shadows /all /quiet D$pA+ =imb;D sma-no @8\|$Ht C\|$8H .CRT$XCA (null) SHChangeNotify t$ WHc\$03 .CRT$XPA devenv.exe `.rdata wrong protocol type L9BHA GetModuleFileNameW Base Class Array' t$HA_A^A]A\_ io error rvf;\$d `A^_^ operator (t$0H :\uSL; L$0I; AppPolicyGetThreadInitializationType L$ L; P>q_Y~ \|$49} (you should download and install TOR browser first https://torproject.org) A^_^][ fD92t kE>fvw UA>N0Wl D$8fE fD9,pu t @8x Tuesday chinese-singapore Hc-G. D$@H+ u^A8G SetStdHandle chinese SUAVH too many links fA9,Au CompareStringEx \$(E3 .?AUmessages_base@std@@ L$(E3 E0t H .basta :\uVL; L$<9L$@ powershell.exe L9=g9 TlsAlloc H9=:% f;\$\ fffffff InitializeSecurityDescriptor fB9<Hu api-ms-win-core-string-l1-1-0 hu-hu nXYZ e0A_A^A]A\] address not available x9obw \$ E3 az-az-latn .i?0@I 8\t H \|$ UATAUAVAWH .?AV?$moneypunct@_W$0A@@std@@ L$Hf; Lj[;> $Recycle.Bin CloseHandle CL$(N [ncd>0 spanish-puerto rico \mluc en-nz fA9,Qu f9,^u L95)n mr-in u3HcH<H kL@8o(u EnterCriticalSection _hypot :\tIH -lcms operation in progress t$ UWAVH twIcF MM/dd/yy t$(I; sihost.exe explorer.exe USVWATAUAVAWH fD91uTL9r r_f;\$l en-JM vi-VN chrm V&kg(zHT @A^_] H9E(H comsysapp invalid string position (D$ f fA99t A lv-LV nan(ind) .?AV?$_Mpunct@D@std@@ \|$ AVH \|$4Ic `eh vector constructor iterator' \$8I; dutch-belgian ar-iq NfD9d$pu mpz_powm: Negative exponent and non-invertible base. ABCDEFGHIJKLMNOPQRSTUVWXYZ @UVWATAUAVAWH english-ire regsvr32.exe api-ms-win-core-localization-obsolete-l1-2-0 ;I9}(tiH nb-NO K~Je#>! fr-fr H9t$@t F H9F norwegian-nynorsk ` M9fh english-trinidad y tobago permission denied L9=/; vboxservice D$8L9 L$0H; english-can D$PE3 No forced path found D$xE3 SUVWATAUAVAWH SetEntriesInAclW 3>fvw 0A^A]A\_^][ camsvc ;.u1L es-PR A_A\_^] no such device or address t(fff mpz_import: Nails not supported. smj-se Init error: HH:mm:ss A8L9(t es-SV t$HE3 f9<Ju CompareStringW fE98t' t'<Zt gfffffffI america quz-BO china H9=# 0A^^[ D$HI+ \|$ AVA .?AVfacet@locale@std@@ d7.t] MGD;} `hr \| `managed vector copy constructor iterator' french-canadian ko-kr A_^] fD9 t )D$ H af-za (T?j?Y swedish-finland CreateProcessW .CRT$XPXA D$HE3 .?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ VT$PD ar-YE .?AV_Locimp@locale@std@@ floor ro-ro IsDebuggerPresent .?AV?$ctype@D@std@@ french-swiss L9=}I mt-MT es-do div-MV H9=w7 SetThreadpoolWait sl-SI uk-ua hi-in es-CO `vftable' FormatMessageW smj-no .data$r not enough memory InitializeCriticalSectionAndSpinCount user32 &7#R L9=0H T$ D)s fG9$Ou illegal byte sequence appinfo GetTempPathW ms-my ?TY,>5 msbuild.exe __based( D$@H; T$PE3 [<-uWH .?AV?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ .?AVstl_critical_section_interface@details@Concurrency@@ not a socket no stream resources :\umE `managed vector constructor iterator' uz-UZ-Cyrl ml-IN spanish-el salvador english-jamaica fD91u .?AV?$_Mpunct@G@std@@ <:wSH Md$@A mpz_powm: Zero modulo. L$ SUVWH fD9,Au fD9!u zh-HK E8a(u c(>\, r7f;\$\| D;\$0~CE3 bad array new length D$BH; :\uRL; !"#$%&'()+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~ Type Descriptor' bad conversion D$h9t$P HeapReAlloc NkqQn v@D8s(t f9,Hu ?:kP< usE8E D$1E3 UVWATAUAVAWH sa-in ur-pk :\urE ar-KW D$@E3 zh-mo fkdjsadasd.ico @.reloc `RTTI bn-IN t$`H+ .text$di \$0eH id-ID Error 755: %i gfffL not a directory CommandLine 4p#S4 USVWATAVAWH ext-ms-win-ntuser-windowstation-l1-1-0 sr-sp-latn \|$XH; serviceHub.vsdetouredhost.exe af-ZA A_A^A]A\] L90u$H SUWATAUAVAWH GetUserDefaultLCID 98t H IsValidLocale L$ fff CreateThreadpoolWait spanish-argentina ja-jp `local static thread guard' .?AV?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ hy-AM A\_^ french-luxembourg .xdata$x l$`I+ _nextafter @SVWATAUAVAWH \$ UVWATAUAVAWH fr-MC HeapSize fa-ir ineID L$h;M fD94H}aD LCMapStringW ugA8G \|$`CI ar-JO result out of range ar-lb abcdefghijklmnopqrstuvwxyz \$0H; D+{HD+ 6wtpt LocalFree nn-NO .?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ t4dU7xaRfZLDyHeCjMn3Vb5vUL9Z9pVWm0UKfaq6UuN/3p+htNjT8qx9QiAfc/w3gVDsrNplXUebAbwYLH3DArItBNTrxcn8hr/y0dT0w+2pxjMp2oOtWKWVq8ClfJhdlv/NTeQb9CCI+JkhEArvACvftxVAmlWmTEAaUKdu1Pu8+odY9iDjR6CWZQEDPtHL3m8gVYP1sG2K/BTK1PzH3bPMajXKvc1SdWYXCfO0pryB5u+8RJ/1XPwVHyyAaGALRZ32RwA1IxkX+d5H08uLWwiUkb71IdTYjLMa35P1RH+6URv+u4VrgndKYgB8te+TixmTdstdBm1+wtCyzzomKRf048yWUMKJoFtst8S0qH/gegs6gusltOgBfaTV/5MvCLs9DAD7+tlem+iMuSYUMqoReSqofx3iR0YEalegjqCvEMDg90Uyot3x06TeniYNqsQbh6+907l4DrJ3xf11TWSfdfjE8VIMWftbkQrgc3QJyDjFombVyjjJVQ0diyZ93BefPt8eg/L6EnTkRnpFhRkrlcw3YiaEvYAH90w1rc1gXMa7qqGus3kcts296SZb+fKDqFfOW26Lp8ItbGF6SS17eRh4Y767ec9jqMCGcsu6YAGqsiU6xCWr3K9WAg05lAf/qw7m33tB+RMJvPyF+xBtyS9v3rTBDQPSRwAayuE= EnumSystemLocalesEx SubmitThreadpoolWork EnumSystemLocalesW en-CB T$(H+ .idata$2 D,$< bg-BG GetFileAttributesW L+T$@ D$8H; fA9,vu GetCurrentThreadId .CRT$XCC L;\|$X D;sHu t$8;; 9\$0u ;\$0\| FreeLibrary Unknown exception `vbtable' t(LcuoH; E+A@H b(oGL @UWAVH mpz_div_qr: Divide by zero. bad locale name H;~ H eLK(w 426,4 ?49HoKC chinese-hongkong &$$$"$ $ Documents and Settings no lock available brokerinfrastructure en-au .?AV?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ no such device @SUVWAVH `+!]? D8yDt ta-IN smn-FI @SVATAVH Go?K IND)ind) L$<E3 operator<=> eventsystem SVWATAUAVAWH german-luxembourg Complete Object Locator' `placement delete[] closure' wuauserv "gRichh es-PA es-pr FindNextFileW t$Nhb" :Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday api-ms-win-core-file-l1-2-2 es-es tRLcY en-jm CD$8D WATAUAVAWH ka-GE fo-fo .?AV?$ctype@_W@std@@ irish-english uk-UA d$HE3 wsearch \$@E3 `local vftable constructor closure' GetTimeFormatEx az-AZ-Cyrl __clrcall EncodePointer `A_A^_^] FindFirstVolumeW @USVWATAUAWH \$HE; fB94Ou dllhost.exe .?AV?$moneypunct@D$00@std@@ Base Class Descriptor at ( t$ WAVE3 L9#t!H t$`E3 <requestedExecutionLevel level='asInvoker' uiAccess='false' /> `copy constructor closure' @SWAUAVAWH device or resource busy english-us WaitForSingleObjectEx L$<9L$P LCMapStringEx t$ AVH %b %d %H : %M : %S %Y <0ufH \|$DE3 \|$@A9T emRoH LC_CTYPE L95%j `vbase destructor' spanish-venezuela spanish-honduras advapi32 L$@E3 utf-8 zh-sg f;\$L \|$0H+ GetEnvironmentStringsW March Z.3.8\ inity f9,Yu en-tt v&=xV A8L9 t :a6CL5 t$ WH ?+>^m <A\u@H T$PH; .?AV_Iostream_error_category2@std@@ c0&>` iphlpsvc fE9,Fu operator co_await s WAVAWH pA^_^][ INITY (oGLR$ owner dead %GoU?* GetStdHandle TUUUU .?AVbad_cast@std@@ @8j(t .?AV?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ l$ VWATH RoInitialize \$ UVWAVAWH bn-in gfffA \root\cimv2 .?AV?$messages@D@std@@ L$ SVWH H+L$`H `A_A^A]A\_^] ntelA T$PH3 D$0H; s5fE9! D$(L; .?AVbad_exception@std@@ D8t$ht english-belize pr china 1#QNAN fB9,Nu ScD$~ ATAUAVH <xuL@ .CRT$XIZ sw-ke GetFileInformationByHandleEx September .CRT$XCZ ATAUAWH SetFileInformationByHandle CD$@D @A_A^A]A\_^] @A_A^_ ta-in CD$HH .?AV?$moneypunct@G$00@std@@ __swift_3 SetFilePointerEx A_A^_ cs-cz (A^A\^[ \|$PL; l$ A* VWATH no buffer space dnscache .data .?AV?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ es-ni s WATAUAVAWH M H1E .idata$4 SetEvent az-AZ-Latn @USVWAWH AP90~ vsdebugconsole.exe RtlPcToFileHeader operation not supported ?kxG2) t$ UH iu+-, <>#n2 te-in 9Qn@&V% FreeLibraryAndExitThread d$@9L mntrRGB XYZ 9p@u+ qS>g?h3 Sleep no message available readme.txt L9=^F HcE_L SetFileAttributesW f9,pu A_A^A\ L$hf; ,I<%w ).9#x tU;\$0tH de-CH fD9'u tQfD9 tK T$0H; 8A^_^[ J,H;T$8w-E3 D8\|$`t `vcall' C847u [yWA; f9)u:H $&&f$Y south africa en-ca WaitForSingleObject ar-ly uz-UZ-Latn f;\$Dr RegSetValueExW A^A]A\ api-ms-win-core-synch-l1-2-0.dll <utK@: .?AV?$collate@D@std@@ .?AV?$messages@G@std@@ fD9<Gu spanish-guatemala AcquireSRWLockExclusive Saturday _oD>Kg fC94wu ios_base::badbit set LC_ALL SetLastError .?AVruntime_error@std@@ el-GR es-bo .idata$5 generic xA_A^A]A\_^[] norwegian-bokmal @UATAUAVAWH ar-SA TryEnterCriticalSection ar-SY es-ve .?AV?$numpunct@G@std@@ UWATAVAWH ?R0I? GetStringTypeW fr-mc en-ZA he-il <security> vKfffff D$(H; 0A_A^A\_^[] l$ VWAVH kn-in is-IS mn-MN D$49C fD9$Ou 9\u6I mi-NZ <assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'> uzKs@> xXI96tSI D;d$P} /2GG>!B `vector destructor iterator' hA_A^A]A\_^][ GetModuleHandleW `eh vector vbase copy constructor iterator' canadian nan(snan) .CRT$XLZ .rsrc$01 9t$Pu south-africa @USVWATAUAVH N,sK, T$4E: south-korea N3`d? D$`L; L$xE3 .text GetCommandLineA LocaleNameToLCID address in use 0123456789- mn-mn power ~,uEI @8{(u xh-za )D$`H+^ Create UnhandledExceptionFilter sk-SK ka-ge ar-EG u4I9}( HcC H __restrict en-CA CorExitProcess GetProcessHeap D8L$0uP D$0HcH CreateThread j?V() D$0H9D$8 snan) PA_A^_^] )D$ f south korea L\|4f; WakeConditionVariable AUAVAWH D$(H!L$ E3 {,D+{HD+ CoUninitialize USVWAVH u^D8N network unreachable d$ D! new[] .CRT$XIC $Ib?s <htl<jt\<lt4<tt$<wt .?AV?$collate@_W@std@@ InitOnceExecuteOnce @b;zO] ^<V7w syr-SY argument out of domain T$ Lc @>%>b kernel32.dll ms-BN spanish-nicaragua .data$rs `local static guard' GIMP built-in sRG fD9d$pt+fD :AM:am:PM:pm COMSPEC too many files open in system :\tII ios_base::eofbit set sv-fi 8\uuE 8D$Xt ar-MA network down CreateEventW GetCurrentProcessId GetDateFormatW t$HH+ \|$ D! .rdata$voltmd AppPolicyGetProcessTerminationMethod .?AV?$numpunct@_W@std@@ pt-BR D$PI; hy-am { AUAVAWH M.f(z .?AVexception@std@@ directory not empty FlushFileBuffers LeaveCriticalSection .text$mn$00 xOHcC en-ie x UATAUAVAWH iostream L$`f; ?7{KV HHteH GetCurrentProcess :\u7I @8~8t @SVAVAWH {$z6A WideCharToMultiByte @SVWH (A_A^^[ belgian es-hn </trustInfo> SystemParametersInfoW !This program cannot be run in DOS mode. D$8E3 .?AV?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ Windows L$<;L$P T$8H+ rOVdVGrd]d .?AVbad_alloc@std@@ @A_A^A\ .tls$ZZZ #t'fA great britain .CRT$XCL A_A^A]_] lt-lt cdpsvc A8M(u es-MX @8~0tM </requestedPrivileges> Win32_Process host unreachable A_A^_^] .?AV?$_Mpunct@_W@std@@ PA__^[] D$8H+ es-ec @USVWATAVAWH T$ E3 L9yHA (D$@f t;LcF system (D$`f sessionenv H;xXu5 <St[A: """"""""""""""":33333C3kf it-IT https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion/ %d / %m / %y \|$@I+ D$8L;C HcG H ?UUUUUU H+\$`H FindFirstFileW Public Domain fo-FO L9=V: f\|5h\ se-NO CD$XfD !l$ H FlsGetValue InitializeConditionVariable M?H;MGs H spanish-dominican republic .?AVbad_array_new_length@std@@ de-ch 9)~P3 protocol not supported IsValidCodePage <vt{<x serviceHub.host.clr.exe D,H< 'L>[ .?AVstl_critical_section_win7@details@Concurrency@@ CT$8L A^A]A\_^[] GetUserDefaultLocaleName iostream stream error serviceHub.testWindowstorehost.exe RoUninitialize D8t$2u v2!L.2 D$@fD z@q_H bad exception ReadFile `anonymous namespace' @A_A^A\_^][ L$4+L$8 <:uyH filename too long <A\t}H OUT.txt uED8r(t .CRT$XTA LC_COLLATE api-ms-win-core-localization-l1-2-1 ar-ye x AUAVAWH Syst3 ^RfN> D+\$0ff ?E=$% B A{Xy^gv __crt_strtox::floating_point_value::as_float ar-qa es-pe da-dk T$pt+H u,!T$(H!T$ l$8@2 es-ar no space on device Class Hierarchy Descriptor' GetConsoleMode ms-bn stream timeout \c$\Windows\tmp.exe D$XE3 UVWATAUAVAW spanish-paraguay pt-br t$xt3 is-is f9,Fu sv-SE d?000000`? ky-kg fr-ch too many symbolic link levels c[9(tD fr-FR 0123456789ABCDEFabcdef-+Xx L$0Lc@ api-ms-win-core-processthreads-l1-1-2 C:\Windows\tmp.exe se-SE 1#SNAN .?AV?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ german-swiss pt-pt WriteFile english-usa T$89T$@ .text$x `typeof' de-li swiss __pascal ms-MY A__^ .?AV?$messages@_W@std@@ cy-gb t$ E3 x AVAW RtlVirtualUnwind L$4+L$H !AQaq0p@ no such process H9\$X `scalar deleting destructor' atan2 l$4D8d$1u zh-CN GetCurrentPackageId invalid argument fD9;u sk-sk L$0E; L$PE3 fB9<A}1L jV+tvD smj-NO RtlUnwindEx d$XfD unknown error united-kingdom bg-bg \$PH+ t$8E3 es-gt d$ E3 hA_A^A]A\_^[] <}wRI 9>powf dsajdhas.0 T$`fA; .CRT$XCAA 0A_A^A]A\_ fE9<$u success 8ke?; D W?{W eu-ES !"#$%&'()+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~ @A_A^_^] ExecMethod hres = %08x american english $dmdd invalid seek L$ I; fD9't D$Hf; L$ VWAVH resource unavailable try again )>6{1n text file busy x AVH L$XH3 __thiscall no such file or directory ?f`Y4 D$ E3 t$PHc @SWAUAVH kk-KZ WakeAllConditionVariable ru-RU .?AVout_of_range@std@@ D8d$@tNI FreeConsole Monday <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> ICC_PROFILE D$@fA9 protocol error de-LI t$`fD9+t$I DeviceIoControl lkXKg'9Kf WATAVH t)IcV remoteaccess d$ H9r lt-LT gfffffffH cs-CZ T$HE: f;\$Lr D+A@H +t;zV kok-in spanish-colombia GetFullPathNameW f9,Ju @A^_^ SW@STv TlsSetValue Mutex detected D$@Hc 8A_A^A]A\_^][ english-uk :Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December IsProcessorFeaturePresent GetProcAddress DecodePointer HcEgH T$@E; @SWAVH D8t$<tKI l$pM+ ,\|0J,h Hcu`M InitializeCriticalSectionEx tt-RU H;XXs H!T$0D HeapAlloc L9=+G D8\|$Ht .?AVrange_error@std@@ connection aborted CL:>8 D$xf; delete[] eHA_A^A]A\_^[] L$xH3 argument list too long api-ms-win-core-synch-l1-2-0 operation would block identifier removed A03>A\| AK>(v is a directory en-BZ mL+7H norwegian @USVWAVH VD$Pf A]A\^][ es-PY fr-CA GetTimeZoneInformation taL9Chu nl-be .idata$6 l$@L+ .?AV?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ es-cl sq-al l$4E3 RegCreateKeyExW 0123456789abcdefghijklmnopqrstuvwxyz .?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ D8l$ptGH @USVWATAUAVAWH interrupted 0A_A^_^] .?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@ united-states L95Yo sr-ba-latn ar-BH <?xml version='1.0' encoding='UTF-8' standalone='yes'?> kok-IN -BH>t \$ UH sr-SP-Latn dnshostname .?AV?$ctype@G@std@@ L$8H; <:u~H GetCurrentProcessorNumber WaNd? `8@N0 L$@;\| fD97t read only file system L$`;M The data will be published on TOR website if you do not pay the ransom ])6M>& ;D$hsC zh-hk german-austrian connection already in progress VWATAUAVAWL 0A_A^A] L9=F4 te-IN l$hH+ id-id iygE3 CoSetProxyBlanket sv-FI CoInitializeEx Hc\$<A; p;Y>u !1qAQa 1#INF es-HN syr-sy vi-vn D$0f; A^A\_ .?AV?$numpunct@D@std@@ L$HE; CloseThreadpoolTimer D$DE3 .xdata log10 f9,~u \$@fD e0A_A^A]A\_^] nl-nl WriteConsoleW (k<"% FindVolumeClose en-GB Thursday USVWAVAWH `placement delete closure' failed1 G H9G L$ SH ca-es fr-BE en-AU uoA8] APD9 ~ H!D$ I et-EE es-CR bad allocation wcmsvc `eh vector vbase constructor iterator' zY;>u:m .text$yd T$0H;T$8t,H H+L$ xFH zh-CHT @SVAVH H9=R% DD$xH fD94Au american-english 1#IND 8\t!L e0A^A]A\_^[] @8~0t @SUVWATAUAVH

Signatures

Attempts to connect to a dead IP:Port (2 unique times)

Queries the keyboard layout

A file was accessed within the Public folder.

SetUnhandledExceptionFilter detected (possible anti-debug)

Possible date expiration check, exits too soon after checking local time

Anomalous file deletion behavior detected (10+)

Resumed a thread in another process

Establishes an encrypted HTTPS connection

Reads data out of its own binary image

Terminates another process

Uses Windows utilities for basic functionality

A system process is generating network traffic likely as a result of process injection

Exhibits possible ransomware or wiper file modification behavior: mass_file_deletion overwrites_existing_files

Binary file triggered YARA rule

Clears Windows events or logs

Attempts to delete or modify volume shadow copies

Attempts to modify desktop wallpaper

Appends a known BlackBasta ransomware file extension to files that have been encrypted

Uses suspicious command line tools or Windows utilities

Explorer.exe process established HTTP connections

Screenshots

Network Analysis

Nothing to display.

Dropped Files

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db
File Size	74120 bytes
MD5	0304925bbfe7a7591748776bf6d0750e
SHA1	ab81948808047cb1b3dba75ded338eeb1d31ec4c
SHA256	f1de7dfddb9cc6ed4349bf17e4502ea636866c406c6d3e8a9e879aa5283150f2 [VT] [MWDB] [Bazaar]
SHA3-384	b95c2b8f0948809fd9d81a214d8eea0d9886a58b90c5f699f105218149831b360ce0972b9d73d890d8c45dae205b8b81
CRC32	ABCC8D62
TLSH	T1B773BA203AF94215E6F39B715EF5A7698975BC529E168F0F0140B38D0831A11E8BBF3B
Ssdeep	768:DpsQEnby3f3nJ38kAGz7XdbpfHN6zNPSMdR1Tvnfjmlj0qusmndlvrIgb:Ynby3f3J38kaZL
	Strings

	--profile-directory=Default C:\Windows\system32\WF.msc @shell32.dll,-22067 C:\Windows\system32 WINDOW~2.LNK Fax y Esc %dfrgui.lnk Math Input Panel.lnk Documentation.lnk IDLE (Python 3.10 32-bit).lnk Unidad de recuperaci @shell32.dll,-21762 7-Zip @shell32.dll,-21788 C:\Windows\system32\psr.exe C:\Windows\system32\perfmon.msc ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} DControl Panel.lnk C:\Windows\system32\mspaint.exe C:\Program Files\Windows NT\Accessories\wordpad.exe @C:\Windows\system32\RecoveryDrive.exe,-500 VideoLAN C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe @C:\Windows\system32\wdc.dll,-10030 n del sistema BPython 3.10 (32-bit).lnk Wordpad.lnk Monitor de rendimiento @C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555 Accesibilidad de Windows Public Microsoft.Windows.Explorer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ODBC Data Sources (64-bit).lnk Paint.lnk n de acciones de usuario C:\Users\pacop\AppData\Local\Microsoft\OneDrive Notepad.lnk C:\Windows\system32\notepad.exe C:\Windows\system32\perfmon.exe Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe 7-Zip Help 7-Zip File Manager Microsoft.Windows.ControlPanel DRun.lnk IDLE (Python 3.10 32-bit) PCharacter Map.lnk @C:\Windows\system32\wdc.dll,-10021 C:\Windows\System32\Control.exe -Iskins [ VLCMED~3.LNK AppData -m pydoc -b Windows Fax and Scan.lnk Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE O%w$Ya'. {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\regedit.exe C:\Program Files\Windows NT\Accessories {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe @C:\Windows\regedit.exe,-16 Registry Editor.lnk Release Notes OneDrive {F38BF404-1D43-42F2-9305-67DE0B28FC23}\Speech\Common\sapisvr.exe @C:\Windows\System32\AuthFWGP.dll,-20 C:\Windows\system32\msconfig.exe Resource Monitor.lnk Administrador de tareas Herramienta Recortes Internet Explorer C:\Program Files\VideoLAN\VLC\VideoLAN Website.url )Computer Management.lnk @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\Documentation.url xQuick Assist.lnk VLC media player - reset preferences and cache files mbolo del sistema Windows PowerShell ADMINI~1.LNK Maintenance [ DOCUME~1.LNK ner de Windows C:\Windows\syswow64\odbcad32.exe Steps Recorder.lnk C:\Windows\system32\MdSched.exe C:\Windows\system32\comexp.msc DFile Explorer.lnk Accessories @shell32.dll,-22069 Task Manager.lnk PYTHON~1.10 C:\Windows\system32\quickassist.exe Programs {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.exe Accesorios de Windows iSCSI Initiator.lnk C:\Program Files\Internet Explorer ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} -SpeechUX C:\Program Files\7-Zip\7zFM.exe @shell32.dll,-22054 stico de memoria de Windows C:\Program Files (x86)\Windows Media Player Windows {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe 126.0.2592.61\VisualElements\SmallLogo.png C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RecoveryDrive.exe Documentation --reset-config --reset-plugins-cache vlc://quit VLC media player - reset preferences and cache files.lnk n a Escritorio remoto Este equipo PYTHON~1.LNK User Pinned Python 3.10 Manuals (32-bit) Computer Management.lnk Ejecutar Visor de eventos C:\Windows\Speech\Common\sapisvr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe C:\Windows\system32\mstsc.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\compmgmt.msc @C:\Windows\syswow64\odbcint.dll,-1693 Herramientas administrativas de Windows @shell32.dll,-12712 Disk Cleanup.lnk C:\Windows\hh.exe Microsoft.Windows.RemoteDesktop {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\vlc.exe Monitor de recursos {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc FILEEX~1.LNK C:\Windows\system32\msinfo32.exe 8System Tools Python 3.10 Module Docs (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe Servicios mNarrator.lnk C:\Program Files\VideoLAN\VLC\NEWS.txt {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.msc C:\Windows\Speech\Common Maintenance Python 3.10 (32-bit) Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} C:\Program Files\Internet Explorer\iexplore.exe @C:\Windows\system32\dfrgui.exe,-103 Diagn Microsoft.Windows.Computer Microsoft.Windows.MediaPlayer32 Bloc de notas Microsoft.AutoGenerated.{AA38DFA8-4049-61D7-43D2-6D6E828EDA65} @C:\Windows\System32\ie4uinit.exe,-731 Windows PowerShell ISE (x86) VLC media player @shell32.dll,-21761 pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop Reconocimiento de voz de Windows Accessibility @shell32.dll,-22041 Servicios de componentes ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk C:\Windows\system32\eventvwr.msc C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\system32\comres.dll,-3410 services.lnk Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files\Common Files\Microsoft Shared\Ink C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Quick Launch Character Map.lnk VLC media player skinned.lnk WINDOW~1.LNK VLC media player.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application C:\Windows\system32\iscsicpl.exe Microsoft.AutoGenerated.{7B126063-C204-BA07-C04F-4AE0CA11B360} C:\Windows\system32\cmd.exe System Information.lnk @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\quickassist.exe C:\Windows\system32\WFS.exe @C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291 Users C:\Windows\system32\dfrgui.exe MSEdge Microsoft Edge Windows PowerShell.lnk t7-Zip Help.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe C:\Windows\system32\odbcad32.exe Programas Math Input Panel ON-SCR~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe Desfragmentar y optimizar unidades W 7-ZIPH~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe C:\Windows\system32\SnippingTool.exe @C:\Windows\system32\MdSched.exe,-4001 C:\Windows\system32\taskmgr.exe 7-Zip C:\Windows\regedit.exe [ VLCMED~1.LNK Python 3.10 Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge Snipping Tool.lnk OneDrive.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe I$Ya'. Liberador de espacio en disco {6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\Microsoft Shared\Ink\mip.exe Windows PowerShell ISE.lnk Narrator.lnk "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" /prefetch:1 {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7zFM.exe C:\Windows\system32\compmgmt.msc ODBC Data Sources (32-bit) @shell32.dll,-12710 Sistema de Windows VLC media player skinned Quick Assist.lnk /name Microsoft.AdministrativeTools Microsoft.AutoGenerated.{51325390-AE6A-68FC-A315-0950CC83A166} C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe C:\Windows\system32\charmap.exe Windows PowerShell (x86).lnk C:\Windows\system32\WindowsPowerShell\v1.0 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe @C:\Windows\system32\psr.exe,-1701 Windows PowerShell (x86) Task Scheduler.lnk {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Configuraci @C:\Windows\system32\iscsicpl.dll,-5001 Python 3.10 Manuals (32-bit).lnk H[q)`; dfrgui.lnk Microsoft.InternetExplorer.Default Iniciador iSCSI C:\Program Files\VideoLAN\VLC\vlc.exe Windows PowerShell ISE (x86).lnk COMMAN~1.LNK @C:\Windows\syswow64\wmploc.dll,-102 @shell32.dll,-22048 @shell32.dll,-9216 Informaci {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe [ VIDEOL~1.LNK Speech Recognition.lnk Grabaci C:\Program Files\7-Zip\7-zip.chm WordPad Release Notes.lnk C:\Windows\System32 VideoLAN Website.lnk ACCESS~2 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mstsc.exe @C:\Windows\system32\msconfig.exe,-5006 ,VideoLAN Microsoft.AutoGenerated.{101C1D56-6033-DC16-2A6E-55ABB1D74A63} VideoLAN @C:\Windows\system32\msinfo32.exe,-100 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe PYTHON~2.LNK Component Services.lnk Administraci Event Viewer.lnk Python 3.10 Module Docs (32-bit) Command Prompt.lnk CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe Microsoft JImmersive Control Panel.lnk @C:\Windows\system32\quickassist.exe,-806 Windows Media Player.lnk <Event Viewer.lnk @C:\Windows\system32\SnippingTool.exe,-15051 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\eventvwr.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskschd.msc SYSTEM~1 genes de datos ODBC (64 bits) @C:\Windows\system32\filemgmt.dll,-2204 Microsoft.SkyDrive.Desktop C:\Windows\system32\RecoveryDrive.exe Start Menu Editor del Registro DAdministrative Tools.lnk @C:\Windows\system32\miguiresource.dll,-201 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe @shell32.dll,-22026 ProgramData {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\SnippingTool.exe [ RELEAS~1.LNK Memory Diagnostics Tool.lnk Administrative Tools ,Component Services.lnk Paint VideoLAN Website @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 Internet Explorer.lnk ODBC Data Sources (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe Narrador System Configuration.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\psr.exe Administrative Tools IDLE(P~1.LNK Microsoft.AutoGenerated.{30BD9A02-CB9A-93FD-A859-09C8803F2346} System Tools MICROS~1.LNK Microsoft.AutoGenerated.{39F3B85B-63FB-0256-8A0A-AAC177410D28} Windows Media Player {6D809377-6AF0-444B-8957-A3773F02200E}\Windows NT\Accessories\wordpad.exe ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 n de equipos @C:\Windows\system32\FXSRESM.dll,-114 C:\Program Files\VideoLAN\VLC\Documentation.url Run.lnk C:\Windows liSCSI Initiator.lnk @C:\Windows\system32\miguiresource.dll,-101 es-ES 8Programs @C:\Windows\system32\Taskmgr.exe,-32420 W 7-ZIPF~1.LNK Immersive Control Panel.lnk C:\Program Files\VideoLAN\VLC PYTHON~3.LNK @C:\Windows\system32\odbcint.dll,-1694 [ VLCMED~2.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe C:\Windows\system32\services.msc RecoveryDrive.lnk Magnify.lnk gODBC Data Sources (64-bit).lnk TaskBar Microsoft.AutoGenerated.{19EC9782-4EDE-C19F-08F2-3A612CECFE68} LogoImages\OneDriveMedTile.png Remote Desktop Connection.lnk Microsoft.AutoGenerated.{02A49DD7-4561-34E4-3441-2E20BC854ECC} Dcomputer.lnk Microsoft Edge.lnk Microsoft.AutoGenerated.{844D054E-C8C2-2371-ACBC-B8702758EF12} Asistencia r Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc WINDOW~1 Conexi {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Fservices.lnk w7-Zip File Manager.lnk mOn-Screen Keyboard.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\NEWS.txt {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Programs {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7-zip.chm C:\Windows\system32\cleanmgr.exe {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\VideoLAN Website.url {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe INTERN~1.LNK computer.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64 Mapa de caracteres @shell32.dll,-22022 Windows Defender Firewall con seguridad avanzada Microsoft.Windows.AdministrativeTools @C:\Windows\system32\mstsc.exe,-4000 ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla Programador de tareas Performance Monitor.lnk C:\Windows\system32\control.exe Explorador de archivos C:\Program Files\7-Zip C:\Windows\system32\taskschd.msc C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe @C:\Windows\system32\mycomput.dll,-300 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel @shell32.dll,-22051 @shell32.dll,-22021 C:\Windows\system32\magnify.exe @shell32.dll,-21782 Panel de control

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000037.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000037.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000037.db
File Size	74768 bytes
MD5	1957990562dc87fbe658eda06ac0237f
SHA1	119f0c48c510d1746781f2bac6dc157ade70dfcb
SHA256	454e9b7dedf3c65513ca74796552c168c5c9dec278c5129624e0a47596258b6d [VT] [MWDB] [Bazaar]
SHA3-384	3ddb056985f7b3f74e393fc8b531fc64c70dc02efb38e7585fd6a0e43b1befe5f9cd7cca3b7b3b756684d86f8c49ae90
CRC32	3D273207
TLSH	T1C473AB203AF94215E2F39B715EF5A7599A75BC529E168F4F0140B38D0831A11E8BBF3B
Ssdeep	768:XpNQIobv3J3BJ3IkUGMgXr6pSH4dfbIPESDR1TZ47onj3mDdW06MmPQ:Jobv3J3f3IkMoQ
	Strings

	--profile-directory=Default C:\Windows\system32\WF.msc @shell32.dll,-22067 C:\Windows\system32 WINDOW~2.LNK Fax y Esc %dfrgui.lnk MAINTE~1 Math Input Panel.lnk Documentation.lnk IDLE (Python 3.10 32-bit).lnk Unidad de recuperaci @shell32.dll,-21762 7-Zip @shell32.dll,-21788 C:\Windows\system32\psr.exe C:\Windows\system32\perfmon.msc ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} DControl Panel.lnk C:\Windows\system32\mspaint.exe C:\Program Files\Windows NT\Accessories\wordpad.exe @C:\Windows\system32\RecoveryDrive.exe,-500 VideoLAN C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe @C:\Windows\system32\wdc.dll,-10030 n del sistema BPython 3.10 (32-bit).lnk Wordpad.lnk Monitor de rendimiento @C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555 Accesibilidad de Windows Public Microsoft.Windows.Explorer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ODBC Data Sources (64-bit).lnk Paint.lnk n de acciones de usuario C:\Users\pacop\AppData\Local\Microsoft\OneDrive Notepad.lnk C:\Windows\system32\notepad.exe C:\Windows\system32\perfmon.exe Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe 7-Zip Help 7-Zip File Manager Microsoft.Windows.ControlPanel DRun.lnk IDLE (Python 3.10 32-bit) PCharacter Map.lnk @C:\Windows\system32\wdc.dll,-10021 C:\Windows\System32\Control.exe -Iskins [ VLCMED~3.LNK AppData -m pydoc -b Windows Fax and Scan.lnk Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE O%w$Ya'. {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\regedit.exe C:\Program Files\Windows NT\Accessories {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe @C:\Windows\regedit.exe,-16 Registry Editor.lnk Release Notes OneDrive {F38BF404-1D43-42F2-9305-67DE0B28FC23}\Speech\Common\sapisvr.exe @C:\Windows\System32\AuthFWGP.dll,-20 C:\Windows\system32\msconfig.exe Resource Monitor.lnk Administrador de tareas Herramienta Recortes Internet Explorer C:\Program Files\VideoLAN\VLC\VideoLAN Website.url )Computer Management.lnk @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\Documentation.url xQuick Assist.lnk VLC media player - reset preferences and cache files mbolo del sistema Windows PowerShell ADMINI~1.LNK [ DOCUME~1.LNK ner de Windows C:\Windows\syswow64\odbcad32.exe Steps Recorder.lnk C:\Windows\system32\MdSched.exe C:\Windows\system32\comexp.msc DFile Explorer.lnk Accessories @shell32.dll,-22069 Task Manager.lnk PYTHON~1.10 C:\Windows\system32\quickassist.exe Programs {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.exe Accesorios de Windows iSCSI Initiator.lnk C:\Program Files\Internet Explorer ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} -SpeechUX C:\Program Files\7-Zip\7zFM.exe @shell32.dll,-22054 stico de memoria de Windows C:\Program Files (x86)\Windows Media Player Windows {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe 126.0.2592.61\VisualElements\SmallLogo.png C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RecoveryDrive.exe Documentation --reset-config --reset-plugins-cache vlc://quit VLC media player - reset preferences and cache files.lnk n a Escritorio remoto Este equipo PYTHON~1.LNK User Pinned Python 3.10 Manuals (32-bit) Computer Management.lnk Ejecutar Visor de eventos C:\Windows\Speech\Common\sapisvr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe C:\Windows\system32\mstsc.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\compmgmt.msc @C:\Windows\syswow64\odbcint.dll,-1693 Herramientas administrativas de Windows @shell32.dll,-12712 Disk Cleanup.lnk C:\Windows\hh.exe Microsoft.Windows.RemoteDesktop {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\vlc.exe Monitor de recursos {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc FILEEX~1.LNK C:\Windows\system32\msinfo32.exe 8System Tools Python 3.10 Module Docs (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe Servicios mNarrator.lnk C:\Program Files\VideoLAN\VLC\NEWS.txt Maintenance C:\Windows\Speech\Common {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.msc Python 3.10 (32-bit) Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} C:\Program Files\Internet Explorer\iexplore.exe @C:\Windows\system32\dfrgui.exe,-103 Diagn Microsoft.Windows.Computer Microsoft.Windows.MediaPlayer32 Bloc de notas Microsoft.AutoGenerated.{AA38DFA8-4049-61D7-43D2-6D6E828EDA65} @C:\Windows\System32\ie4uinit.exe,-731 Windows PowerShell ISE (x86) VLC media player @shell32.dll,-21761 pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop Reconocimiento de voz de Windows Accessibility @shell32.dll,-22041 Servicios de componentes ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk C:\Windows\system32\eventvwr.msc C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\system32\comres.dll,-3410 services.lnk Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files\Common Files\Microsoft Shared\Ink C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Quick Launch Character Map.lnk VLC media player skinned.lnk WINDOW~1.LNK VLC media player.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application C:\Windows\system32\iscsicpl.exe Microsoft.AutoGenerated.{7B126063-C204-BA07-C04F-4AE0CA11B360} C:\Windows\system32\cmd.exe System Information.lnk @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\quickassist.exe C:\Windows\system32\WFS.exe @C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291 Users C:\Windows\system32\dfrgui.exe MSEdge Microsoft Edge Windows PowerShell.lnk t7-Zip Help.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe C:\Windows\system32\odbcad32.exe Math Input Panel ON-SCR~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe Desfragmentar y optimizar unidades W 7-ZIPH~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe C:\Windows\system32\SnippingTool.exe @C:\Windows\system32\MdSched.exe,-4001 C:\Windows\system32\taskmgr.exe 7-Zip C:\Windows\regedit.exe [ VLCMED~1.LNK Python 3.10 Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge Snipping Tool.lnk OneDrive.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe I$Ya'. Liberador de espacio en disco {6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\Microsoft Shared\Ink\mip.exe Windows PowerShell ISE.lnk Narrator.lnk "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" /prefetch:1 {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7zFM.exe C:\Windows\system32\compmgmt.msc ODBC Data Sources (32-bit) @shell32.dll,-12710 Sistema de Windows VLC media player skinned Quick Assist.lnk /name Microsoft.AdministrativeTools Microsoft.AutoGenerated.{51325390-AE6A-68FC-A315-0950CC83A166} C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe C:\Windows\system32\charmap.exe ADMINI~1 Windows PowerShell (x86).lnk C:\Windows\system32\WindowsPowerShell\v1.0 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe @C:\Windows\system32\psr.exe,-1701 Windows PowerShell (x86) Task Scheduler.lnk {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Configuraci @C:\Windows\system32\iscsicpl.dll,-5001 Python 3.10 Manuals (32-bit).lnk H[q)`; dfrgui.lnk Microsoft.InternetExplorer.Default Iniciador iSCSI C:\Program Files\VideoLAN\VLC\vlc.exe Windows PowerShell ISE (x86).lnk COMMAN~1.LNK @C:\Windows\syswow64\wmploc.dll,-102 @shell32.dll,-22048 @shell32.dll,-9216 Informaci {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe [ VIDEOL~1.LNK Speech Recognition.lnk Grabaci C:\Program Files\7-Zip\7-zip.chm WordPad Release Notes.lnk C:\Windows\System32 VideoLAN Website.lnk ACCESS~2 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mstsc.exe @C:\Windows\system32\msconfig.exe,-5006 ,VideoLAN Microsoft.AutoGenerated.{101C1D56-6033-DC16-2A6E-55ABB1D74A63} VideoLAN @C:\Windows\system32\msinfo32.exe,-100 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe PYTHON~2.LNK Component Services.lnk Administraci Event Viewer.lnk Python 3.10 Module Docs (32-bit) Command Prompt.lnk CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe Microsoft JImmersive Control Panel.lnk @C:\Windows\system32\quickassist.exe,-806 Windows Media Player.lnk <Event Viewer.lnk @C:\Windows\system32\SnippingTool.exe,-15051 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\eventvwr.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskschd.msc SYSTEM~1 genes de datos ODBC (64 bits) @C:\Windows\system32\filemgmt.dll,-2204 Microsoft.SkyDrive.Desktop C:\Windows\system32\RecoveryDrive.exe Start Menu Editor del Registro DAdministrative Tools.lnk @C:\Windows\system32\miguiresource.dll,-201 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe @shell32.dll,-22026 ProgramData {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\SnippingTool.exe [ RELEAS~1.LNK Memory Diagnostics Tool.lnk Administrative Tools ,Component Services.lnk Paint VideoLAN Website @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 Internet Explorer.lnk ODBC Data Sources (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe Narrador System Configuration.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\psr.exe Administrative Tools IDLE(P~1.LNK Microsoft.AutoGenerated.{30BD9A02-CB9A-93FD-A859-09C8803F2346} System Tools MICROS~1.LNK Microsoft.AutoGenerated.{39F3B85B-63FB-0256-8A0A-AAC177410D28} Windows Media Player {6D809377-6AF0-444B-8957-A3773F02200E}\Windows NT\Accessories\wordpad.exe ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 n de equipos @C:\Windows\system32\FXSRESM.dll,-114 C:\Program Files\VideoLAN\VLC\Documentation.url Run.lnk C:\Windows liSCSI Initiator.lnk @C:\Windows\system32\miguiresource.dll,-101 es-ES @C:\Windows\system32\Taskmgr.exe,-32420 W 7-ZIPF~1.LNK Immersive Control Panel.lnk C:\Program Files\VideoLAN\VLC nAdministrative Tools PYTHON~3.LNK @C:\Windows\system32\odbcint.dll,-1694 [ VLCMED~2.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe C:\Windows\system32\services.msc RecoveryDrive.lnk Magnify.lnk gODBC Data Sources (64-bit).lnk TaskBar Microsoft.AutoGenerated.{19EC9782-4EDE-C19F-08F2-3A612CECFE68} LogoImages\OneDriveMedTile.png Remote Desktop Connection.lnk Microsoft.AutoGenerated.{02A49DD7-4561-34E4-3441-2E20BC854ECC} Dcomputer.lnk Microsoft Edge.lnk Microsoft.AutoGenerated.{844D054E-C8C2-2371-ACBC-B8702758EF12} Asistencia r Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc WINDOW~1 Conexi {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Fservices.lnk w7-Zip File Manager.lnk mOn-Screen Keyboard.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\NEWS.txt {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7-zip.chm C:\Windows\system32\cleanmgr.exe {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\VideoLAN Website.url {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe INTERN~1.LNK computer.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64 Mapa de caracteres @shell32.dll,-22022 Windows Defender Firewall con seguridad avanzada Microsoft.Windows.AdministrativeTools @C:\Windows\system32\mstsc.exe,-4000 ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla Programador de tareas Performance Monitor.lnk C:\Windows\system32\control.exe Explorador de archivos C:\Program Files\7-Zip C:\Windows\system32\taskschd.msc C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe @C:\Windows\system32\mycomput.dll,-300 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel @shell32.dll,-22051 @shell32.dll,-22021 C:\Windows\system32\magnify.exe Panel de control

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000035.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000035.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000035.db
File Size	75456 bytes
MD5	c0890147be11cd85229aadd3ac071211
SHA1	57b4a4ccd836d26661869936a628137bdf07a04b
SHA256	37b8f6072bf163c502ba1fc93d4b71403bd02cae5a23fdb2dcf38af56218e141 [VT] [MWDB] [Bazaar]
SHA3-384	3eac4116017aef8fd59351f8e1a8d80fd6a1ac51f20a09be3b906d95912a53115290e384e489069668eadefdd62887b1
CRC32	18DD12CF
TLSH	T14173BB203AF94215F2F39B715EF5A7699975FC529E168B4F0140B38D0831A11E8BAF3B
Ssdeep	768:ZpaQEgbx363MJ3yk5G5Y+XZZpzHRecGyvUdR1TZ2B3em5m0eoUzmIjSkp:cgbx363W3yk8nPajSA
	Strings

	--profile-directory=Default C:\Windows\system32\WF.msc @shell32.dll,-22067 XD0 MICROS~1.LNK C:\Windows\system32 WINDOW~2.LNK Fax y Esc %dfrgui.lnk 126.0.6478.185\VisualElements\SmallLogo.png Math Input Panel.lnk Documentation.lnk IDLE (Python 3.10 32-bit).lnk Unidad de recuperaci @shell32.dll,-21762 7-Zip @shell32.dll,-21788 C:\Windows\system32\psr.exe C:\Windows\system32\perfmon.msc ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} DControl Panel.lnk C:\Windows\system32\mspaint.exe C:\Program Files\Windows NT\Accessories\wordpad.exe @C:\Windows\system32\RecoveryDrive.exe,-500 VideoLAN C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe @C:\Windows\system32\wdc.dll,-10030 n del sistema BPython 3.10 (32-bit).lnk Wordpad.lnk Monitor de rendimiento @C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555 Accesibilidad de Windows Public Microsoft.Windows.Explorer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ODBC Data Sources (64-bit).lnk Paint.lnk n de acciones de usuario C:\Users\pacop\AppData\Local\Microsoft\OneDrive Notepad.lnk C:\Windows\system32\notepad.exe C:\Windows\system32\perfmon.exe Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe 7-Zip Help 7-Zip File Manager Microsoft.Windows.ControlPanel DRun.lnk IDLE (Python 3.10 32-bit) PCharacter Map.lnk @C:\Windows\system32\wdc.dll,-10021 C:\Windows\System32\Control.exe -Iskins [ VLCMED~3.LNK AppData -m pydoc -b Windows Fax and Scan.lnk Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\regedit.exe C:\Program Files\Windows NT\Accessories {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc 126.0.2592.113\VisualElements\SmallLogo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe @C:\Windows\regedit.exe,-16 Registry Editor.lnk Release Notes OneDrive {F38BF404-1D43-42F2-9305-67DE0B28FC23}\Speech\Common\sapisvr.exe @C:\Windows\System32\AuthFWGP.dll,-20 C:\Windows\system32\msconfig.exe Resource Monitor.lnk Administrador de tareas Herramienta Recortes Internet Explorer C:\Program Files\VideoLAN\VLC\VideoLAN Website.url )Computer Management.lnk @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\Documentation.url xQuick Assist.lnk VLC media player - reset preferences and cache files mbolo del sistema Windows PowerShell ADMINI~1.LNK Maintenance [ DOCUME~1.LNK ner de Windows C:\Windows\syswow64\odbcad32.exe Steps Recorder.lnk C:\Windows\system32\MdSched.exe C:\Windows\system32\comexp.msc DFile Explorer.lnk Accessories @shell32.dll,-22069 Task Manager.lnk PYTHON~1.10 C:\Windows\system32\quickassist.exe Programs {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.exe Accesorios de Windows iSCSI Initiator.lnk C:\Program Files\Internet Explorer ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} -SpeechUX C:\Program Files\7-Zip\7zFM.exe @shell32.dll,-22054 stico de memoria de Windows C:\Program Files (x86)\Windows Media Player Windows {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe 126.0.2592.61\VisualElements\SmallLogo.png C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RecoveryDrive.exe Documentation --reset-config --reset-plugins-cache vlc://quit VLC media player - reset preferences and cache files.lnk n a Escritorio remoto Este equipo PYTHON~1.LNK User Pinned Python 3.10 Manuals (32-bit) Computer Management.lnk Ejecutar Visor de eventos C:\Windows\Speech\Common\sapisvr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe C:\Windows\system32\mstsc.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\compmgmt.msc t7-Zip @C:\Windows\syswow64\odbcint.dll,-1693 Herramientas administrativas de Windows @shell32.dll,-12712 Disk Cleanup.lnk C:\Windows\hh.exe Microsoft.Windows.RemoteDesktop {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\vlc.exe Monitor de recursos {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc FILEEX~1.LNK C:\Windows\system32\msinfo32.exe Python 3.10 Module Docs (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe Servicios mNarrator.lnk C:\Program Files\VideoLAN\VLC\NEWS.txt {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.msc C:\Windows\Speech\Common Maintenance Python 3.10 (32-bit) Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} C:\Program Files\Internet Explorer\iexplore.exe @C:\Windows\system32\dfrgui.exe,-103 Diagn Microsoft.Windows.Computer Microsoft.Windows.MediaPlayer32 Bloc de notas Microsoft.AutoGenerated.{AA38DFA8-4049-61D7-43D2-6D6E828EDA65} @C:\Windows\System32\ie4uinit.exe,-731 Windows PowerShell ISE (x86) VLC media player @shell32.dll,-21761 pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop Reconocimiento de voz de Windows Accessibility @shell32.dll,-22041 Servicios de componentes ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk C:\Windows\system32\eventvwr.msc C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\system32\comres.dll,-3410 services.lnk Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files\Common Files\Microsoft Shared\Ink C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Quick Launch Character Map.lnk VLC media player skinned.lnk WINDOW~1.LNK VLC media player.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application 126.0.2592.113\VisualElements\Logo.png C:\Windows\system32\iscsicpl.exe Microsoft.AutoGenerated.{7B126063-C204-BA07-C04F-4AE0CA11B360} C:\Windows\system32\cmd.exe System Information.lnk @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\quickassist.exe C:\Windows\system32\WFS.exe @C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291 Users C:\Windows\system32\dfrgui.exe MSEdge Microsoft Edge Windows PowerShell.lnk t7-Zip Help.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe C:\Windows\system32\odbcad32.exe Math Input Panel ON-SCR~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe Desfragmentar y optimizar unidades W 7-ZIPH~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe C:\Windows\system32\SnippingTool.exe @C:\Windows\system32\MdSched.exe,-4001 C:\Windows\system32\taskmgr.exe 7-Zip C:\Windows\regedit.exe [ VLCMED~1.LNK Python 3.10 Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge Snipping Tool.lnk OneDrive.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe Liberador de espacio en disco {6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\Microsoft Shared\Ink\mip.exe Windows PowerShell ISE.lnk Narrator.lnk "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" /prefetch:1 {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7zFM.exe C:\Windows\system32\compmgmt.msc {6D809377-6AF0-444B-8957-A3773F02200E}\Google\Chrome\Application\chrome.exe ODBC Data Sources (32-bit) @shell32.dll,-12710 Sistema de Windows VLC media player skinned Quick Assist.lnk /name Microsoft.AdministrativeTools Microsoft.AutoGenerated.{51325390-AE6A-68FC-A315-0950CC83A166} C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe C:\Windows\system32\charmap.exe Windows PowerShell (x86).lnk C:\Windows\system32\WindowsPowerShell\v1.0 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe @C:\Windows\system32\psr.exe,-1701 Windows PowerShell (x86) Task Scheduler.lnk {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Configuraci @C:\Windows\system32\iscsicpl.dll,-5001 Python 3.10 Manuals (32-bit).lnk H[q)`; 126.0.6478.185\VisualElements\Logo.png dfrgui.lnk Microsoft.InternetExplorer.Default Iniciador iSCSI C:\Program Files\VideoLAN\VLC\vlc.exe Windows PowerShell ISE (x86).lnk COMMAN~1.LNK @C:\Windows\syswow64\wmploc.dll,-102 @shell32.dll,-22048 @shell32.dll,-9216 Informaci {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe [ VIDEOL~1.LNK Speech Recognition.lnk Grabaci C:\Program Files\7-Zip\7-zip.chm WordPad Release Notes.lnk C:\Windows\System32 VideoLAN Website.lnk ACCESS~2 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mstsc.exe @C:\Windows\system32\msconfig.exe,-5006 X`0 GOOGLE~1.LNK Microsoft.AutoGenerated.{101C1D56-6033-DC16-2A6E-55ABB1D74A63} VideoLAN @C:\Windows\system32\msinfo32.exe,-100 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe PYTHON~2.LNK Component Services.lnk Administraci Event Viewer.lnk Python 3.10 Module Docs (32-bit) Command Prompt.lnk CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe Microsoft JImmersive Control Panel.lnk @C:\Windows\system32\quickassist.exe,-806 Windows Media Player.lnk <Event Viewer.lnk @C:\Windows\system32\SnippingTool.exe,-15051 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\eventvwr.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskschd.msc SYSTEM~1 genes de datos ODBC (64 bits) @C:\Windows\system32\filemgmt.dll,-2204 Microsoft.SkyDrive.Desktop C:\Windows\system32\RecoveryDrive.exe Start Menu Editor del Registro DAdministrative Tools.lnk Google Chrome @C:\Windows\system32\miguiresource.dll,-201 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe @shell32.dll,-22026 ProgramData {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\SnippingTool.exe [ RELEAS~1.LNK Memory Diagnostics Tool.lnk Administrative Tools ,Component Services.lnk Paint VideoLAN Website @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 Internet Explorer.lnk ODBC Data Sources (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe Narrador System Configuration.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\psr.exe Administrative Tools IDLE(P~1.LNK Microsoft.AutoGenerated.{30BD9A02-CB9A-93FD-A859-09C8803F2346} System Tools MICROS~1.LNK Microsoft.AutoGenerated.{39F3B85B-63FB-0256-8A0A-AAC177410D28} Windows Media Player {6D809377-6AF0-444B-8957-A3773F02200E}\Windows NT\Accessories\wordpad.exe ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 n de equipos @C:\Windows\system32\FXSRESM.dll,-114 C:\Program Files\VideoLAN\VLC\Documentation.url Run.lnk C:\Windows liSCSI Initiator.lnk @C:\Windows\system32\miguiresource.dll,-101 es-ES C:\Program Files\Google\Chrome\Application\chrome.exe @C:\Windows\system32\Taskmgr.exe,-32420 W 7-ZIPF~1.LNK Immersive Control Panel.lnk C:\Program Files\VideoLAN\VLC PYTHON~3.LNK @C:\Windows\system32\odbcint.dll,-1694 [ VLCMED~2.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe C:\Windows\system32\services.msc RecoveryDrive.lnk Magnify.lnk gODBC Data Sources (64-bit).lnk TaskBar Microsoft.AutoGenerated.{19EC9782-4EDE-C19F-08F2-3A612CECFE68} LogoImages\OneDriveMedTile.png Remote Desktop Connection.lnk Microsoft.AutoGenerated.{02A49DD7-4561-34E4-3441-2E20BC854ECC} Dcomputer.lnk Microsoft Edge.lnk Microsoft.AutoGenerated.{844D054E-C8C2-2371-ACBC-B8702758EF12} Asistencia r Google Chrome.lnk Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc WINDOW~1 Conexi {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Fservices.lnk w7-Zip File Manager.lnk mOn-Screen Keyboard.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\NEWS.txt {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7-zip.chm C:\Windows\system32\cleanmgr.exe {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\VideoLAN Website.url {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe INTERN~1.LNK computer.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64 Mapa de caracteres @shell32.dll,-22022 Windows Defender Firewall con seguridad avanzada Microsoft.Windows.AdministrativeTools C:\Program Files\Google\Chrome\Application xw1u<% @C:\Windows\system32\mstsc.exe,-4000 ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla Programador de tareas Performance Monitor.lnk C:\Windows\system32\control.exe Explorador de archivos C:\Program Files\7-Zip C:\Windows\system32\taskschd.msc C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe @C:\Windows\system32\mycomput.dll,-300 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Chrome @shell32.dll,-22051 @shell32.dll,-22021 C:\Windows\system32\magnify.exe Panel de control

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000038.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000038.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000038.db
File Size	43504 bytes
MD5	788a6853c286dd677e0f0fe37e2d7c5a
SHA1	7c22baa538a85217658d1d03faf095fedfc75566
SHA256	576ddf2dcef91fb3274242d097352b3441132db376fa1eb8deced4adca55323d [VT] [MWDB] [Bazaar]
SHA3-384	6a3973ab81ba8aa83d3ff146c8b7af65a53278be16c079a2b784a75f934a720d3e67c6a12db557e9d0aaeeedd25fef31
CRC32	CADC5162
TLSH	T12B1388107FF94211E5F3DB706AF6A765D976BC529E568A4E0100B34D1831A10F8BAF3B
Ssdeep	384:4sWsbsgsKITfsqssnp6foJsr+6bI+3lG3ySJ3/sKj+25TvkOsg7GbsosOsbs/s3z:Ip6QElb9343RJ3fkM7GcXUMAN2LmJGSm
	Strings

	{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe PYTHON~1.10 --profile-directory=Default Programas Programs Administrative Tools C:\Windows\system32\WF.msc %System Tools Accesorios de Windows @shell32.dll,-22067 W$Y$(. C:\Program Files\Internet Explorer ON-SCR~1.LNK ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} C:\Windows\system32 WINDOW~2.LNK @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe Fax y Esc MSEdge 7-Zip Internet Explorer.lnk Python 3.10 C:\Program Files (x86)\Windows Media Player Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge OneDrive.lnk C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe Windows IDLE (Python 3.10 32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe I$Y$(. _Accessories @shell32.dll,-21762 126.0.2592.61\VisualElements\SmallLogo.png Windows PowerShell ISE.lnk Narrator.lnk C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk Narrador "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe 7-Zip /prefetch:1 {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe @shell32.dll,-21788 126.0.2592.61\VisualElements\Logo.png Administrative Tools IDLE(P~1.LNK @shell32.dll,-12710 Sistema de Windows ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} Este equipo DControl Panel.lnk VideoLAN PYTHON~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe User Pinned System Tools Python 3.10 Manuals (32-bit) Ejecutar MICROS~1.LNK BPython 3.10 (32-bit).lnk /name Microsoft.AdministrativeTools Windows Media Player Accesibilidad de Windows ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Herramientas administrativas de Windows Public @C:\Windows\system32\FXSRESM.dll,-114 @shell32.dll,-12712 I$Y%(. Microsoft.Windows.Explorer Run.lnk C:\Windows C:\Windows\system32\charmap.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe es-ES C:\Windows\hh.exe 8Programs OPI$Y FILEEX~1.LNK C:\Users\pacop\AppData\Local\Microsoft\OneDrive Windows PowerShell (x86).lnk Python 3.10 Module Docs (32-bit).lnk C:\Windows\system32\WindowsPowerShell\v1.0 Immersive Control Panel.lnk Windows PowerShell (x86) PYTHON~3.LNK Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Microsoft.Windows.ControlPanel Configuraci Python 3.10 Manuals (32-bit).lnk DRun.lnk IDLE (Python 3.10 32-bit) {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe PCharacter Map.lnk Magnify.lnk TaskBar C:\Windows\System32\Control.exe LogoImages\OneDriveMedTile.png mNarrator.lnk Maintenance Microsoft.InternetExplorer.Default Dcomputer.lnk Microsoft Edge.lnk Python 3.10 (32-bit) [$Y%(. Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} WINDOW~1 C:\Program Files\Internet Explorer\iexplore.exe AppData Windows PowerShell ISE (x86).lnk COMMAN~1.LNK Microsoft.Windows.Computer -m pydoc -b @C:\Windows\syswow64\wmploc.dll,-102 Microsoft.Windows.MediaPlayer32 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Windows Fax and Scan.lnk @shell32.dll,-22048 mOn-Screen Keyboard.lnk @shell32.dll,-9216 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Programs @C:\Windows\System32\ie4uinit.exe,-731 Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE (x86) Windows PowerShell ISE {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe @shell32.dll,-21761 O%w$Ya'. pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe Accessibility @shell32.dll,-22041 C:\Windows\System32 ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk INTERN~1.LNK computer.lnk ACCESS~2 OneDrive {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\System32\AuthFWGP.dll,-20 Mapa de caracteres Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe @shell32.dll,-22022 I$Y#(. VideoLAN PYTHON~2.LNK Windows Defender Firewall con seguridad avanzada C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Microsoft.Windows.AdministrativeTools Quick Launch Character Map.lnk Internet Explorer @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 WINDOW~1.LNK Python 3.10 Module Docs (32-bit) C:\Program Files (x86)\Microsoft\Edge\Application Command Prompt.lnk ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe mbolo del sistema Windows PowerShell Microsoft C:\Windows\system32\control.exe JImmersive Control Panel.lnk ADMINI~1.LNK Windows Media Player.lnk Explorador de archivos C:\Windows\system32\cmd.exe Maintenance ner de Windows SYSTEM~1 @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft.SkyDrive.Desktop windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel C:\Windows\system32\WFS.exe Start Menu DAdministrative Tools.lnk @shell32.dll,-22021 Users {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe ProgramData C:\Windows\system32\magnify.exe DFile Explorer.lnk Accessories @shell32.dll,-21782 Panel de control Microsoft Edge Windows PowerShell.lnk

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000039.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000039.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000039.db
File Size	41328 bytes
MD5	11fad738587abfdcc8fd6a6b69edf08c
SHA1	a3b3677954b4665bc6595e317842fa0badafc042
SHA256	c53763201dc38f370411c549537f4e7435be8470d15e1aeeab956b6c7ba97fc5 [VT] [MWDB] [Bazaar]
SHA3-384	84e024efa37f7f839fba34ad89d1c74a4320e6ae71f93b2cf345afcad963a972b398bf2c3147e2da0f31b7961af1d732
CRC32	113F9989
TLSH	T1000386106FF54221E6F3DB716EF6A725D576BC52DE568A4E0100B34D2831A10F8AAF3B
Ssdeep	768:jpgQnP5bZ3e3xJ3YW8kcGtXSqrrqkmL1hc:TP5bZ3e3P3P8k41hc
	Strings

	{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe PYTHON~1.10 --profile-directory=Default Programas Programs Administrative Tools C:\Windows\system32\WF.msc Accesorios de Windows @shell32.dll,-22067 C:\Program Files\Internet Explorer ON-SCR~1.LNK ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} C:\Windows\system32 WINDOW~2.LNK @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe Fax y Esc MSEdge MAINTE~1 Internet Explorer.lnk U$Y'(. Python 3.10 C:\Program Files (x86)\Windows Media Player Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe Windows IDLE (Python 3.10 32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe I$Y$(. _Accessories @shell32.dll,-21762 126.0.2592.61\VisualElements\SmallLogo.png Windows PowerShell ISE.lnk Narrator.lnk C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe V$Y'(. mMagnify.lnk Narrador "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe /prefetch:1 {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png @shell32.dll,-21788 Administrative Tools IDLE(P~1.LNK @shell32.dll,-12710 Sistema de Windows ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} Este equipo DControl Panel.lnk PYTHON~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe User Pinned System Tools Python 3.10 Manuals (32-bit) Ejecutar MICROS~1.LNK BPython 3.10 (32-bit).lnk /name Microsoft.AdministrativeTools Windows Media Player Accesibilidad de Windows ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Herramientas administrativas de Windows Public @C:\Windows\system32\FXSRESM.dll,-114 @shell32.dll,-12712 I$Y%(. Microsoft.Windows.Explorer Run.lnk C:\Windows C:\Windows\system32\charmap.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe es-ES C:\Windows\hh.exe ADMINI~1 OPI$Y FILEEX~1.LNK Windows PowerShell (x86).lnk Python 3.10 Module Docs (32-bit).lnk C:\Windows\system32\WindowsPowerShell\v1.0 Immersive Control Panel.lnk Windows PowerShell (x86) PYTHON~3.LNK Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Microsoft.Windows.ControlPanel Configuraci Python 3.10 Manuals (32-bit).lnk DRun.lnk IDLE (Python 3.10 32-bit) {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe PCharacter Map.lnk Magnify.lnk TaskBar C:\Windows\System32\Control.exe mNarrator.lnk Maintenance Microsoft.InternetExplorer.Default Dcomputer.lnk Microsoft Edge.lnk Python 3.10 (32-bit) Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} WINDOW~1 C:\Program Files\Internet Explorer\iexplore.exe AppData Windows PowerShell ISE (x86).lnk COMMAN~1.LNK Microsoft.Windows.Computer -m pydoc -b @C:\Windows\syswow64\wmploc.dll,-102 Microsoft.Windows.MediaPlayer32 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Windows Fax and Scan.lnk @shell32.dll,-22048 mOn-Screen Keyboard.lnk @shell32.dll,-9216 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe @C:\Windows\System32\ie4uinit.exe,-731 Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE (x86) Windows PowerShell ISE {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe @shell32.dll,-21761 O%w$Ya'. pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe Accessibility @shell32.dll,-22041 C:\Windows\System32 ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk INTERN~1.LNK computer.lnk ACCESS~2 {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\System32\AuthFWGP.dll,-20 Mapa de caracteres Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe @shell32.dll,-22022 PYTHON~2.LNK Windows Defender Firewall con seguridad avanzada C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Microsoft.Windows.AdministrativeTools Quick Launch Character Map.lnk Internet Explorer @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 WINDOW~1.LNK Python 3.10 Module Docs (32-bit) C:\Program Files (x86)\Microsoft\Edge\Application Command Prompt.lnk ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe mbolo del sistema Windows PowerShell Microsoft C:\Windows\system32\control.exe JImmersive Control Panel.lnk ADMINI~1.LNK Windows Media Player.lnk Explorador de archivos C:\Windows\system32\cmd.exe ner de Windows SYSTEM~1 @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel C:\Windows\system32\WFS.exe Start Menu DAdministrative Tools.lnk @shell32.dll,-22021 Users ^$Y'(. {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe ProgramData C:\Windows\system32\magnify.exe DFile Explorer.lnk Accessories @shell32.dll,-21782 Panel de control Microsoft Edge Windows PowerShell.lnk

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000034.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000034.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000034.db
File Size	78544 bytes
MD5	7eac0dcf031660ae0719e8e77e256a69
SHA1	829fe6c59a40bc953b73d0723b13f1e412c69ac4
SHA256	1f981e7dcd0c09f02b39d27b9f36e7a1ef806b78f6402dd44cbed26b67339c53 [VT] [MWDB] [Bazaar]
SHA3-384	417f8bedbc480b87ecc81b1b645b7565f808092d2f9809f613b8549a247f5c2fed74a1e294df201a47c5657bb4532c79
CRC32	07C9794F
TLSH	T12873AB203AF94215F6F39B715EF5A7699A76FC529D168F4E0140738D0831A01E8BAF3B
Ssdeep	768:6pWQEsbd3+3gJ3ak1G1LX3Ip4HAPenyEmrR1TU8I0mbU0fLeS5mGqMX6:bsbd3+3i3akqeGC
	Strings

	--profile-directory=Default C:\Windows\system32\WF.msc @shell32.dll,-22067 XD0 MICROS~1.LNK C:\Windows\system32 WINDOW~2.LNK Fax y Esc %dfrgui.lnk 126.0.6478.185\VisualElements\SmallLogo.png Math Input Panel.lnk Documentation.lnk IDLE (Python 3.10 32-bit).lnk Unidad de recuperaci @shell32.dll,-21762 7-Zip @shell32.dll,-21788 C:\Windows\system32\psr.exe C:\Windows\system32\perfmon.msc ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} DControl Panel.lnk C:\Windows\system32\mspaint.exe C:\Program Files\Windows NT\Accessories\wordpad.exe @C:\Windows\system32\RecoveryDrive.exe,-500 VideoLAN C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe @C:\Windows\system32\wdc.dll,-10030 n del sistema BPython 3.10 (32-bit).lnk Wordpad.lnk Monitor de rendimiento @C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555 Accesibilidad de Windows Public Microsoft.Windows.Explorer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ODBC Data Sources (64-bit).lnk Paint.lnk n de acciones de usuario C:\Users\pacop\AppData\Local\Microsoft\OneDrive Notepad.lnk C:\Windows\system32\notepad.exe C:\Windows\system32\perfmon.exe Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe 7-Zip Help 7-Zip File Manager Microsoft.Windows.ControlPanel DRun.lnk IDLE (Python 3.10 32-bit) PCharacter Map.lnk @C:\Windows\system32\wdc.dll,-10021 C:\Windows\System32\Control.exe -Iskins [ VLCMED~3.LNK AppData -m pydoc -b Windows Fax and Scan.lnk Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\regedit.exe C:\Program Files\Windows NT\Accessories {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc 126.0.2592.113\VisualElements\SmallLogo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe @C:\Windows\regedit.exe,-16 Registry Editor.lnk Release Notes OneDrive {F38BF404-1D43-42F2-9305-67DE0B28FC23}\Speech\Common\sapisvr.exe @C:\Windows\System32\AuthFWGP.dll,-20 C:\Windows\system32\msconfig.exe Resource Monitor.lnk Administrador de tareas Herramienta Recortes Internet Explorer C:\Program Files\VideoLAN\VLC\VideoLAN Website.url )Computer Management.lnk @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\Documentation.url xQuick Assist.lnk VLC media player - reset preferences and cache files mbolo del sistema Windows PowerShell ADMINI~1.LNK Maintenance [ DOCUME~1.LNK ner de Windows C:\Windows\syswow64\odbcad32.exe Steps Recorder.lnk C:\Windows\system32\MdSched.exe C:\Windows\system32\comexp.msc DFile Explorer.lnk Accessories @shell32.dll,-22069 Task Manager.lnk PYTHON~1.10 C:\Windows\system32\quickassist.exe Programs {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.exe Accesorios de Windows iSCSI Initiator.lnk C:\Program Files\Internet Explorer ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} -SpeechUX C:\Program Files\7-Zip\7zFM.exe @shell32.dll,-22054 stico de memoria de Windows C:\Program Files (x86)\Windows Media Player Windows {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe 126.0.2592.61\VisualElements\SmallLogo.png C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RecoveryDrive.exe Documentation --reset-config --reset-plugins-cache vlc://quit VLC media player - reset preferences and cache files.lnk n a Escritorio remoto Este equipo PYTHON~1.LNK User Pinned Python 3.10 Manuals (32-bit) Computer Management.lnk Ejecutar Visor de eventos C:\Windows\Speech\Common\sapisvr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe C:\Windows\system32\mstsc.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\compmgmt.msc t7-Zip @C:\Windows\syswow64\odbcint.dll,-1693 Herramientas administrativas de Windows @shell32.dll,-12712 Disk Cleanup.lnk C:\Windows\hh.exe Microsoft.Windows.RemoteDesktop {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\vlc.exe Monitor de recursos {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc FILEEX~1.LNK C:\Windows\system32\msinfo32.exe Python 3.10 Module Docs (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe Servicios mNarrator.lnk C:\Program Files\VideoLAN\VLC\NEWS.txt {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.msc C:\Windows\Speech\Common Maintenance Python 3.10 (32-bit) Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} C:\Program Files\Internet Explorer\iexplore.exe @C:\Windows\system32\dfrgui.exe,-103 Diagn Microsoft.Windows.Computer Microsoft.Windows.MediaPlayer32 Bloc de notas Microsoft.AutoGenerated.{AA38DFA8-4049-61D7-43D2-6D6E828EDA65} @C:\Windows\System32\ie4uinit.exe,-731 Windows PowerShell ISE (x86) VLC media player @shell32.dll,-21761 pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop Reconocimiento de voz de Windows Accessibility @shell32.dll,-22041 Servicios de componentes ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk C:\Windows\system32\eventvwr.msc C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\system32\comres.dll,-3410 services.lnk Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files\Common Files\Microsoft Shared\Ink C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Quick Launch Character Map.lnk VLC media player skinned.lnk WINDOW~1.LNK VLC media player.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application 126.0.2592.113\VisualElements\Logo.png C:\Windows\system32\iscsicpl.exe Microsoft.AutoGenerated.{7B126063-C204-BA07-C04F-4AE0CA11B360} C:\Windows\system32\cmd.exe System Information.lnk @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\quickassist.exe C:\Windows\system32\WFS.exe @C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291 Users C:\Windows\system32\dfrgui.exe MSEdge Microsoft Edge Windows PowerShell.lnk t7-Zip Help.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe C:\Windows\system32\odbcad32.exe Programas Math Input Panel ON-SCR~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe Desfragmentar y optimizar unidades W 7-ZIPH~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe C:\Windows\system32\SnippingTool.exe @C:\Windows\system32\MdSched.exe,-4001 C:\Windows\system32\taskmgr.exe 7-Zip C:\Windows\regedit.exe [ VLCMED~1.LNK Python 3.10 Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge Snipping Tool.lnk OneDrive.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe Liberador de espacio en disco {6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\Microsoft Shared\Ink\mip.exe Windows PowerShell ISE.lnk Narrator.lnk "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" /prefetch:1 {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7zFM.exe C:\Windows\system32\compmgmt.msc {6D809377-6AF0-444B-8957-A3773F02200E}\Google\Chrome\Application\chrome.exe ODBC Data Sources (32-bit) @shell32.dll,-12710 Sistema de Windows VLC media player skinned Quick Assist.lnk /name Microsoft.AdministrativeTools Microsoft.AutoGenerated.{51325390-AE6A-68FC-A315-0950CC83A166} C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe C:\Windows\system32\charmap.exe Windows PowerShell (x86).lnk C:\Windows\system32\WindowsPowerShell\v1.0 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe @C:\Windows\system32\psr.exe,-1701 Windows PowerShell (x86) Task Scheduler.lnk {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Configuraci @C:\Windows\system32\iscsicpl.dll,-5001 Python 3.10 Manuals (32-bit).lnk H[q)`; 126.0.6478.185\VisualElements\Logo.png dfrgui.lnk Microsoft.InternetExplorer.Default Iniciador iSCSI C:\Program Files\VideoLAN\VLC\vlc.exe Windows PowerShell ISE (x86).lnk COMMAN~1.LNK @C:\Windows\syswow64\wmploc.dll,-102 @shell32.dll,-22048 @shell32.dll,-9216 Informaci {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe [ VIDEOL~1.LNK Speech Recognition.lnk Grabaci C:\Program Files\7-Zip\7-zip.chm WordPad Release Notes.lnk C:\Windows\System32 VideoLAN Website.lnk ACCESS~2 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mstsc.exe @C:\Windows\system32\msconfig.exe,-5006 X`0 GOOGLE~1.LNK Microsoft.AutoGenerated.{101C1D56-6033-DC16-2A6E-55ABB1D74A63} VideoLAN @C:\Windows\system32\msinfo32.exe,-100 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe PYTHON~2.LNK Component Services.lnk Administraci Event Viewer.lnk Python 3.10 Module Docs (32-bit) Command Prompt.lnk CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe Microsoft JImmersive Control Panel.lnk @C:\Windows\system32\quickassist.exe,-806 Windows Media Player.lnk <Event Viewer.lnk @C:\Windows\system32\SnippingTool.exe,-15051 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\eventvwr.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskschd.msc SYSTEM~1 genes de datos ODBC (64 bits) @C:\Windows\system32\filemgmt.dll,-2204 VLCMED~1.LNK Microsoft.SkyDrive.Desktop C:\Windows\system32\RecoveryDrive.exe Start Menu Editor del Registro DAdministrative Tools.lnk Google Chrome @C:\Windows\system32\miguiresource.dll,-201 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe @shell32.dll,-22026 ProgramData {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\SnippingTool.exe [ RELEAS~1.LNK Memory Diagnostics Tool.lnk Administrative Tools ,Component Services.lnk Paint VideoLAN Website @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 Internet Explorer.lnk ODBC Data Sources (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe Narrador System Configuration.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\psr.exe Administrative Tools IDLE(P~1.LNK Microsoft.AutoGenerated.{30BD9A02-CB9A-93FD-A859-09C8803F2346} System Tools MICROS~1.LNK Microsoft.AutoGenerated.{39F3B85B-63FB-0256-8A0A-AAC177410D28} Windows Media Player {6D809377-6AF0-444B-8957-A3773F02200E}\Windows NT\Accessories\wordpad.exe ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 n de equipos @C:\Windows\system32\FXSRESM.dll,-114 C:\Program Files\VideoLAN\VLC\Documentation.url Run.lnk C:\Windows liSCSI Initiator.lnk @C:\Windows\system32\miguiresource.dll,-101 es-ES C:\Program Files\Google\Chrome\Application\chrome.exe @C:\Windows\system32\Taskmgr.exe,-32420 W 7-ZIPF~1.LNK Immersive Control Panel.lnk C:\Program Files\VideoLAN\VLC PYTHON~3.LNK @C:\Windows\system32\odbcint.dll,-1694 [ VLCMED~2.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe C:\Windows\system32\services.msc RecoveryDrive.lnk Magnify.lnk gODBC Data Sources (64-bit).lnk TaskBar Microsoft.AutoGenerated.{19EC9782-4EDE-C19F-08F2-3A612CECFE68} LogoImages\OneDriveMedTile.png Remote Desktop Connection.lnk Microsoft.AutoGenerated.{02A49DD7-4561-34E4-3441-2E20BC854ECC} Dcomputer.lnk Microsoft Edge.lnk Microsoft.AutoGenerated.{844D054E-C8C2-2371-ACBC-B8702758EF12} Asistencia r Google Chrome.lnk Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc WINDOW~1 Conexi {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Fservices.lnk w7-Zip File Manager.lnk mOn-Screen Keyboard.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\NEWS.txt {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Programs {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7-zip.chm C:\Windows\system32\cleanmgr.exe {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\VideoLAN Website.url {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe INTERN~1.LNK computer.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64 Mapa de caracteres GOOGLE~1.LNK @shell32.dll,-22022 Windows Defender Firewall con seguridad avanzada Microsoft.Windows.AdministrativeTools C:\Program Files\Google\Chrome\Application xw1u<% @C:\Windows\system32\mstsc.exe,-4000 ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla Programador de tareas Performance Monitor.lnk C:\Windows\system32\control.exe Explorador de archivos C:\Program Files\7-Zip C:\Windows\system32\taskschd.msc C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe @C:\Windows\system32\mycomput.dll,-300 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Chrome @shell32.dll,-22051 @shell32.dll,-22021 C:\Windows\system32\magnify.exe @shell32.dll,-21782 Panel de control

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000033.db

Filename	{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000033.db
File Type	data
Associated Filenames	C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000033.db
File Size	78544 bytes
MD5	b0c39dbc64cccee31423d2c4e69d0fbe
SHA1	27cc3dfc8d4fa086337154adf920bdc740ae4935
SHA256	70d2db0c3e564822c28124d0a75b5a0c822b39a7a09368289e6d890216a3107a [VT] [MWDB] [Bazaar]
SHA3-384	a14971befcf4c1acc6072834a3355edd79135bc21685d20f216d8afd5969902921e9d2ba356461f874c228d3d85cd018
CRC32	9F30EA95
TLSH	T11B73AB203AF94215F6F39B715EF5A7699A76FC529D168F4E0140738D0831A01E8BAF3B
Ssdeep	768:6pWQEsbd3+3gJ3ak1GELX3Ip4HAPenyEmrR1TU8I0mbU0fLeS5mrqMX6:bsbd3+3i3akNerC
	Strings

	--profile-directory=Default C:\Windows\system32\WF.msc @shell32.dll,-22067 XD0 MICROS~1.LNK C:\Windows\system32 WINDOW~2.LNK Fax y Esc %dfrgui.lnk Math Input Panel.lnk Documentation.lnk IDLE (Python 3.10 32-bit).lnk Unidad de recuperaci @shell32.dll,-21762 7-Zip @shell32.dll,-21788 C:\Windows\system32\psr.exe C:\Windows\system32\perfmon.msc ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} DControl Panel.lnk C:\Windows\system32\mspaint.exe C:\Program Files\Windows NT\Accessories\wordpad.exe @C:\Windows\system32\RecoveryDrive.exe,-500 VideoLAN C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\pythonw.exe @C:\Windows\system32\wdc.dll,-10030 n del sistema BPython 3.10 (32-bit).lnk Wordpad.lnk Monitor de rendimiento @C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555 Accesibilidad de Windows Public Microsoft.Windows.Explorer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ODBC Data Sources (64-bit).lnk Paint.lnk n de acciones de usuario C:\Users\pacop\AppData\Local\Microsoft\OneDrive Notepad.lnk C:\Windows\system32\notepad.exe C:\Windows\system32\perfmon.exe X2[ GOOGLE~1.LNK Microsoft.AutoGenerated.{79549B29-A693-26EC-78A9-0D333BE054D3} {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe 7-Zip Help 7-Zip File Manager Microsoft.Windows.ControlPanel DRun.lnk IDLE (Python 3.10 32-bit) PCharacter Map.lnk @C:\Windows\system32\wdc.dll,-10021 C:\Windows\System32\Control.exe -Iskins [ VLCMED~3.LNK AppData -m pydoc -b Windows Fax and Scan.lnk Microsoft.Windows.Shell.RunDialog Windows PowerShell ISE {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe C:\Windows\system32\narrator.exe {F38BF404-1D43-42F2-9305-67DE0B28FC23}\regedit.exe C:\Program Files\Windows NT\Accessories {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc 126.0.2592.113\VisualElements\SmallLogo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WFS.exe @C:\Windows\regedit.exe,-16 Registry Editor.lnk Release Notes OneDrive {F38BF404-1D43-42F2-9305-67DE0B28FC23}\Speech\Common\sapisvr.exe @C:\Windows\System32\AuthFWGP.dll,-20 C:\Windows\system32\msconfig.exe Resource Monitor.lnk Administrador de tareas Herramienta Recortes Internet Explorer C:\Program Files\VideoLAN\VLC\VideoLAN Website.url )Computer Management.lnk @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102 {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\Documentation.url xQuick Assist.lnk VLC media player - reset preferences and cache files mbolo del sistema Windows PowerShell ADMINI~1.LNK Maintenance [ DOCUME~1.LNK ner de Windows C:\Windows\syswow64\odbcad32.exe Steps Recorder.lnk C:\Windows\system32\MdSched.exe C:\Windows\system32\comexp.msc DFile Explorer.lnk Accessories @shell32.dll,-22069 Task Manager.lnk PYTHON~1.10 C:\Windows\system32\quickassist.exe Programs {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.exe Accesorios de Windows iSCSI Initiator.lnk C:\Program Files\Internet Explorer ::{52205FD8-5DFB-447D-801A-D0B52F2E83E1} -SpeechUX C:\Program Files\7-Zip\7zFM.exe 126.0.6478.128\VisualElements\SmallLogo.png @shell32.dll,-22054 stico de memoria de Windows C:\Program Files (x86)\Windows Media Player Windows {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe 126.0.2592.61\VisualElements\SmallLogo.png C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe LogoImages\OneDriveSmallTile.png mMagnify.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RecoveryDrive.exe Documentation --reset-config --reset-plugins-cache vlc://quit VLC media player - reset preferences and cache files.lnk n a Escritorio remoto Este equipo PYTHON~1.LNK User Pinned Python 3.10 Manuals (32-bit) Computer Management.lnk Ejecutar Visor de eventos C:\Windows\Speech\Common\sapisvr.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe C:\Windows\system32\mstsc.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\compmgmt.msc t7-Zip @C:\Windows\syswow64\odbcint.dll,-1693 Herramientas administrativas de Windows @shell32.dll,-12712 Disk Cleanup.lnk C:\Windows\hh.exe Microsoft.Windows.RemoteDesktop {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\vlc.exe Monitor de recursos {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc FILEEX~1.LNK C:\Windows\system32\msinfo32.exe Python 3.10 Module Docs (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe Servicios mNarrator.lnk C:\Program Files\VideoLAN\VLC\NEWS.txt {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\perfmon.msc C:\Windows\Speech\Common Maintenance Python 3.10 (32-bit) Microsoft.AutoGenerated.{6537554F-745B-18D3-A96A-F2C63BF9600F} C:\Program Files\Internet Explorer\iexplore.exe @C:\Windows\system32\dfrgui.exe,-103 Diagn Microsoft.Windows.Computer Microsoft.Windows.MediaPlayer32 Bloc de notas Microsoft.AutoGenerated.{AA38DFA8-4049-61D7-43D2-6D6E828EDA65} @C:\Windows\System32\ie4uinit.exe,-731 Windows PowerShell ISE (x86) VLC media player @shell32.dll,-21761 pacop @shell32.dll,-22052 C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Desktop Reconocimiento de voz de Windows Accessibility @shell32.dll,-22041 Servicios de componentes ::{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} Windows Defender Firewall with Advanced Security.lnk C:\Windows\system32\eventvwr.msc C:\Windows\syswow64\WindowsPowerShell\v1.0 @C:\Windows\system32\comres.dll,-3410 services.lnk Roaming C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files\Common Files\Microsoft Shared\Ink C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe Quick Launch Character Map.lnk VLC media player skinned.lnk WINDOW~1.LNK VLC media player.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application 126.0.2592.113\VisualElements\Logo.png C:\Windows\system32\iscsicpl.exe Microsoft.AutoGenerated.{7B126063-C204-BA07-C04F-4AE0CA11B360} C:\Windows\system32\cmd.exe System Information.lnk @shell32.dll,-21760 @C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\quickassist.exe C:\Windows\system32\WFS.exe @C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291 Users C:\Windows\system32\dfrgui.exe MSEdge Microsoft Edge Windows PowerShell.lnk t7-Zip Help.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Windows Media Player\wmplayer.exe C:\Windows\system32\odbcad32.exe Programas Math Input Panel ON-SCR~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe Desfragmentar y optimizar unidades W 7-ZIPH~1.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe C:\Windows\system32\SnippingTool.exe @C:\Windows\system32\MdSched.exe,-4001 C:\Windows\system32\taskmgr.exe 7-Zip C:\Windows\regedit.exe [ VLCMED~1.LNK Python 3.10 Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge Snipping Tool.lnk OneDrive.lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\charmap.exe Liberador de espacio en disco {6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\Microsoft Shared\Ink\mip.exe Windows PowerShell ISE.lnk Narrator.lnk "C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Lib\idlelib\idle.pyw" /prefetch:1 {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7zFM.exe C:\Windows\system32\compmgmt.msc {6D809377-6AF0-444B-8957-A3773F02200E}\Google\Chrome\Application\chrome.exe ODBC Data Sources (32-bit) @shell32.dll,-12710 Sistema de Windows VLC media player skinned Quick Assist.lnk /name Microsoft.AdministrativeTools Microsoft.AutoGenerated.{51325390-AE6A-68FC-A315-0950CC83A166} C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe C:\Windows\system32\charmap.exe Windows PowerShell (x86).lnk C:\Windows\system32\WindowsPowerShell\v1.0 {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe @C:\Windows\system32\psr.exe,-1701 Windows PowerShell (x86) Task Scheduler.lnk {F38BF404-1D43-42F2-9305-67DE0B28FC23}\hh.exe Configuraci @C:\Windows\system32\iscsicpl.dll,-5001 Python 3.10 Manuals (32-bit).lnk H[q)`; dfrgui.lnk Microsoft.InternetExplorer.Default Iniciador iSCSI C:\Program Files\VideoLAN\VLC\vlc.exe Windows PowerShell ISE (x86).lnk COMMAN~1.LNK @C:\Windows\syswow64\wmploc.dll,-102 @shell32.dll,-22048 @shell32.dll,-9216 Informaci {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\control.exe [ VIDEOL~1.LNK Speech Recognition.lnk Grabaci C:\Program Files\7-Zip\7-zip.chm WordPad Release Notes.lnk C:\Windows\System32 VideoLAN Website.lnk ACCESS~2 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mstsc.exe @C:\Windows\system32\msconfig.exe,-5006 Microsoft.AutoGenerated.{101C1D56-6033-DC16-2A6E-55ABB1D74A63} VideoLAN @C:\Windows\system32\msinfo32.exe,-100 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe PYTHON~2.LNK Component Services.lnk Administraci Event Viewer.lnk Python 3.10 Module Docs (32-bit) Command Prompt.lnk CONTRO~1.LNK C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\python.exe Microsoft JImmersive Control Panel.lnk @C:\Windows\system32\quickassist.exe,-806 Windows Media Player.lnk <Event Viewer.lnk @C:\Windows\system32\SnippingTool.exe,-15051 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\eventvwr.msc {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\taskschd.msc SYSTEM~1 genes de datos ODBC (64 bits) @C:\Windows\system32\filemgmt.dll,-2204 VLCMED~1.LNK Microsoft.SkyDrive.Desktop C:\Windows\system32\RecoveryDrive.exe Start Menu Editor del Registro DAdministrative Tools.lnk Google Chrome @C:\Windows\system32\miguiresource.dll,-201 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe C:\Windows\system32\osk.exe @shell32.dll,-22026 ProgramData {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\SnippingTool.exe [ RELEAS~1.LNK Memory Diagnostics Tool.lnk Administrative Tools ,Component Services.lnk Paint VideoLAN Website @C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101 Internet Explorer.lnk ODBC Data Sources (32-bit).lnk {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe Narrador System Configuration.lnk {7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft\Edge\Application\msedge.exe 126.0.2592.61\VisualElements\Logo.png {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\psr.exe Administrative Tools IDLE(P~1.LNK Microsoft.AutoGenerated.{30BD9A02-CB9A-93FD-A859-09C8803F2346} 126.0.6478.128\VisualElements\Logo.png System Tools MICROS~1.LNK Microsoft.AutoGenerated.{39F3B85B-63FB-0256-8A0A-AAC177410D28} Windows Media Player {6D809377-6AF0-444B-8957-A3773F02200E}\Windows NT\Accessories\wordpad.exe ACCESS~1 C:\Users\pacop\AppData\Local\Programs\Python\Python310-32 n de equipos @C:\Windows\system32\FXSRESM.dll,-114 C:\Program Files\VideoLAN\VLC\Documentation.url Run.lnk C:\Windows liSCSI Initiator.lnk @C:\Windows\system32\miguiresource.dll,-101 es-ES C:\Program Files\Google\Chrome\Application\chrome.exe @C:\Windows\system32\Taskmgr.exe,-32420 W 7-ZIPF~1.LNK Immersive Control Panel.lnk C:\Program Files\VideoLAN\VLC PYTHON~3.LNK @C:\Windows\system32\odbcint.dll,-1694 [ VLCMED~2.LNK {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe C:\Windows\system32\services.msc RecoveryDrive.lnk Magnify.lnk gODBC Data Sources (64-bit).lnk TaskBar Microsoft.AutoGenerated.{19EC9782-4EDE-C19F-08F2-3A612CECFE68} LogoImages\OneDriveMedTile.png Remote Desktop Connection.lnk Microsoft.AutoGenerated.{02A49DD7-4561-34E4-3441-2E20BC854ECC} Dcomputer.lnk Microsoft Edge.lnk Microsoft.AutoGenerated.{844D054E-C8C2-2371-ACBC-B8702758EF12} Asistencia r Google Chrome.lnk Microsoft.AutoGenerated.{2BDE4AD6-B1AF-39E3-66DA-181324D2AB16} {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc WINDOW~1 Conexi {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Control.exe Fservices.lnk w7-Zip File Manager.lnk mOn-Screen Keyboard.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\NEWS.txt {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe Programs {6D809377-6AF0-444B-8957-A3773F02200E}\7-Zip\7-zip.chm C:\Windows\system32\cleanmgr.exe {6D809377-6AF0-444B-8957-A3773F02200E}\VideoLAN\VLC\VideoLAN Website.url {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe INTERN~1.LNK computer.lnk {6D809377-6AF0-444B-8957-A3773F02200E}\Internet Explorer\iexplore.exe C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Doc\python3106.chm C:\Windows\syswow64 Mapa de caracteres GOOGLE~1.LNK @shell32.dll,-22022 Windows Defender Firewall con seguridad avanzada Microsoft.Windows.AdministrativeTools C:\Program Files\Google\Chrome\Application xw1u<% @C:\Windows\system32\mstsc.exe,-4000 ::{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0} Teclado en pantalla Programador de tareas Performance Monitor.lnk C:\Windows\system32\control.exe Explorador de archivos C:\Program Files\7-Zip C:\Windows\system32\taskschd.msc C:\Users\pacop\AppData\Local\Microsoft\OneDrive\OneDrive.exe @C:\Windows\system32\mycomput.dll,-300 windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Chrome @shell32.dll,-22051 @shell32.dll,-22021 C:\Windows\system32\magnify.exe @shell32.dll,-21782 Panel de control

Payloads

Nothing to display.

Behavior Summary

Mutexes

dsajdhas.0
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterMutex
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_16.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_48.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_256.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_768.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_1920.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_sr.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_exif.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide_alternate.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_custom_stream.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!IconCacheInit
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwReaderRefs
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_32.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_96.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_1280.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_768.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1280.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_2560.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1920.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_2560.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_wide.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_exif.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_wide_alternate.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_custom_stream.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwReaderRefs
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!1a08
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!118
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!418
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!2acd8
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!22518
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!218
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!4204
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!4154
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!425c
cversions.3.m
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!42352
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_48.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer
Local\Shell.CMruPidlList
Local\SM0:5112:120:WilError_03
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_16.db!dfMaintainer
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!2d1c8
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!4224a
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!422a2
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!422fa
Global\C::Users:pacop:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!42402
LowDiskOnC
Local\SM0:6272:304:WilStaging_02
Local\SM0:1576:304:WilStaging_02
Local\SM0:3136:304:WilStaging_02
Local\SM0:1192:304:WilStaging_02
Local\SM0:9076:304:WilStaging_02
Local\SM0:7524:304:WilStaging_02
Local\SM0:9004:304:WilStaging_02

Executed Commands

C:\Windows\system32\cmd.exe /c C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
C:\Windows\system32\cmd.exe /c C:\Windows\System32\vssadmin.exe delete shadows /all /quiet
C:\Windows\System32\vssadmin.exe delete shadows /all /quiet
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\System32\slui.exe -Embedding
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\system32\DllHost.exe /Processid:{133EAC4F-5891-4D04-BADA-D84870380A80}
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4585_none_7e06e2187c9234e2\TiWorker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding

Created Services Nothing to display.

Started Services

edgeupdate
TrustedInstaller

Processes

registry filesystem process threading services device network synchronization crypto browser

BlackBasta_03.exe PID: 7364, Parent PID: 8720, Full Path: C:\Users\pacop\AppData\Local\Temp\BlackBasta_03.exe , Command Line: "C:\Users\pacop\AppData\Local\Temp\BlackBasta_03.exe"

cmd.exe PID: 8304, Parent PID: 7364, Full Path: C:\Windows\System32\cmd.exe , Command Line: C:\Windows\system32\cmd.exe /c C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet

cmd.exe PID: 5508, Parent PID: 7364, Full Path: C:\Windows\System32\cmd.exe , Command Line: C:\Windows\system32\cmd.exe /c C:\Windows\System32\vssadmin.exe delete shadows /all /quiet

vssadmin.exe PID: 8580, Parent PID: 5508, Full Path: C:\Windows\System32\vssadmin.exe , Command Line: C:\Windows\System32\vssadmin.exe delete shadows /all /quiet

explorer.exe PID: 5112, Parent PID: 4644, Full Path: C:\Windows\explorer.exe , Command Line: C:\Windows\Explorer.EXE

svchost.exe PID: 776, Parent PID: 628, Full Path: C:\Windows\System32\svchost.exe , Command Line: C:\Windows\system32\svchost.exe -k DcomLaunch -p

dllhost.exe PID: 6272, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

slui.exe PID: 1576, Parent PID: 776, Full Path: C:\Windows\System32\slui.exe , Command Line: C:\Windows\System32\slui.exe -Embedding

dllhost.exe PID: 3136, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

dllhost.exe PID: 1192, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

dllhost.exe PID: 9076, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

dllhost.exe PID: 7524, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

dllhost.exe PID: 9004, Parent PID: 776, Full Path: C:\Windows\System32\dllhost.exe , Command Line: C:\Windows\system32\DllHost.exe /Processid:{133EAC4F-5891-4D04-BADA-D84870380A80}

TiWorker.exe PID: 5920, Parent PID: 776, Full Path: C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4585_none_7e06e2187c9234e2\TiWorker.exe , Command Line: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4585_none_7e06e2187c9234e2\TiWorker.exe -Embedding

Accessed Files

C:\Windows\System32\cmd.exe
C:\Users\pacop\AppData\Local\Temp\dlaksjdoiwq.jpg
C:\Users\pacop\AppData\Local\Temp\fkdjsadasd.ico
C:\Windows\System32\windows.storage.dll
C:\Users\pacop\AppData\Local\Temp\Wldp.dll
C:\Windows\System32\wldp.dll
C:\Windows\System32\kernel.appcore.dll
\Device\CNG
\??\MountPointManager
C:\
D:\
C:\Windows\System32\ntmarta.dll
C:\*
C:\$WinREAgent
C:\$WinREAgent\readme.txt
C:\604.ini
C:\640.ini
C:\652.ini
C:\Archivos de programa
C:\Archivos de programa\readme.txt
C:\BykZfbvJv
C:\BykZfbvJv\readme.txt
C:\curtain.log
C:\Documents and Settings
C:\DumpStack.log.tmp
C:\FDwSxoT
C:\FDwSxoT\readme.txt
C:\JeMgNHV
C:\JeMgNHV\readme.txt
C:\kSSIhSwY
C:\kSSIhSwY\readme.txt
C:\leQWkw
C:\leQWkw\readme.txt
C:\pagefile.sys
C:\pAXehsPqeZ
C:\pAXehsPqeZ\readme.txt
C:\PerfLogs
C:\PerfLogs\readme.txt
C:\Program Files
C:\Program Files\readme.txt
C:\Program Files (x86)
C:\Program Files (x86)\readme.txt
C:\ProgramData
C:\ProgramData\readme.txt
C:\qFosxWEw
C:\qFosxWEw\readme.txt
C:\Recovery
C:\Recovery\readme.txt
C:\sjVjjdVWyc
C:\sjVjjdVWyc\readme.txt
C:\swapfile.sys
C:\System Volume Information
C:\System Volume Information\readme.txt
C:\Temp
C:\Temp\readme.txt
C:\tmp228rx8rl
C:\tmp228rx8rl\readme.txt
C:\tmp3bs9izg4
C:\tmp3bs9izg4\readme.txt
C:\tmp3ljmycja
C:\tmp3ljmycja\readme.txt
C:\tmpb9ol310j
C:\tmpb9ol310j\readme.txt
C:\tmpcynaajs6
C:\tmpcynaajs6\readme.txt
C:\tmpd5tr1_rv
C:\tmpd5tr1_rv\readme.txt
C:\tmpeoix3ml5
C:\tmpeoix3ml5\readme.txt
C:\tmph_w19omx
C:\tmph_w19omx\readme.txt
C:\tmpsv59hb03
C:\tmpsv59hb03\readme.txt
C:\tmpugscyilj
C:\tmpugscyilj\readme.txt
C:\tmpxa6n6jlb
C:\tmpxa6n6jlb\readme.txt
C:\tmpyhyv52bd
C:\tmpyhyv52bd\readme.txt
C:\tmp_4c73x2e
C:\tmp_4c73x2e\readme.txt
C:\Trabajo
C:\Trabajo\readme.txt
C:\Users
C:\Users\readme.txt
C:\VhGXHyPr
C:\VhGXHyPr\readme.txt
C:\VJCYHvoxA
C:\VJCYHvoxA\readme.txt
C:\wJvzAqbRj
C:\wJvzAqbRj\readme.txt
C:\YtGTvE
C:\YtGTvE\readme.txt
C:\zKlZnVrs
C:\zKlZnVrs\readme.txt
C:\$WinREAgent\*
C:\$WinREAgent\Scratch
C:\$WinREAgent\Scratch\readme.txt
C:\Archivos de programa\*
C:\Archivos de programa\7-Zip
C:\Archivos de programa\7-Zip\readme.txt
C:\Archivos de programa\Archivos comunes
C:\Archivos de programa\Archivos comunes\readme.txt
C:\Archivos de programa\Common Files
C:\Archivos de programa\Common Files\readme.txt
C:\Archivos de programa\desktop.ini
C:\Archivos de programa\Google
C:\Archivos de programa\Google\readme.txt
C:\Archivos de programa\Internet Explorer
C:\Archivos de programa\Internet Explorer\readme.txt
C:\Archivos de programa\Microsoft Update Health Tools
C:\Archivos de programa\Microsoft Update Health Tools\readme.txt
C:\Archivos de programa\RUXIM
C:\Archivos de programa\RUXIM\readme.txt
C:\Archivos de programa\Uninstall Information
C:\Archivos de programa\Uninstall Information\readme.txt
C:\Archivos de programa\VideoLAN
C:\Archivos de programa\VideoLAN\readme.txt
C:\BykZfbvJv\*
C:\BykZfbvJv\CAPE
C:\BykZfbvJv\CAPE\readme.txt
C:\BykZfbvJv\drop
C:\BykZfbvJv\drop\readme.txt
C:\BykZfbvJv\files
C:\BykZfbvJv\files\readme.txt
C:\BykZfbvJv\logs
C:\BykZfbvJv\logs\readme.txt
C:\BykZfbvJv\memory
C:\BykZfbvJv\memory\readme.txt
C:\BykZfbvJv\shots
C:\BykZfbvJv\shots\readme.txt
C:\BykZfbvJv\tlsdump
C:\BykZfbvJv\tlsdump\readme.txt
C:\FDwSxoT\*
C:\FDwSxoT\CAPE
C:\FDwSxoT\CAPE\readme.txt
C:\FDwSxoT\drop
C:\FDwSxoT\drop\readme.txt
C:\FDwSxoT\files
C:\FDwSxoT\files\readme.txt
C:\FDwSxoT\logs
C:\FDwSxoT\logs\readme.txt
C:\FDwSxoT\memory
C:\FDwSxoT\memory\readme.txt
C:\FDwSxoT\shots
C:\FDwSxoT\shots\readme.txt
C:\FDwSxoT\tlsdump
C:\FDwSxoT\tlsdump\readme.txt
C:\JeMgNHV\*
C:\JeMgNHV\debugger
C:\JeMgNHV\debugger\readme.txt
C:\JeMgNHV\drop
C:\JeMgNHV\drop\readme.txt
C:\JeMgNHV\files
C:\JeMgNHV\files\readme.txt
C:\JeMgNHV\logs
C:\JeMgNHV\logs\readme.txt
C:\JeMgNHV\memory
C:\JeMgNHV\memory\readme.txt
C:\JeMgNHV\shots
C:\JeMgNHV\shots\readme.txt
C:\kSSIhSwY\*
C:\kSSIhSwY\CAPE
C:\kSSIhSwY\CAPE\readme.txt
C:\kSSIhSwY\drop
C:\kSSIhSwY\drop\readme.txt
C:\kSSIhSwY\files
C:\kSSIhSwY\files\readme.txt
C:\kSSIhSwY\logs
C:\kSSIhSwY\logs\readme.txt
C:\kSSIhSwY\memory
C:\kSSIhSwY\memory\readme.txt
C:\kSSIhSwY\shots
C:\kSSIhSwY\shots\readme.txt
C:\kSSIhSwY\tlsdump
C:\kSSIhSwY\tlsdump\readme.txt
C:\leQWkw\*
C:\leQWkw\drop
C:\leQWkw\drop\readme.txt
C:\leQWkw\files
C:\leQWkw\files\readme.txt
C:\leQWkw\logs
C:\leQWkw\logs\readme.txt
C:\leQWkw\memory
C:\leQWkw\memory\readme.txt
C:\leQWkw\shots
C:\leQWkw\shots\readme.txt
C:\leQWkw\tlsdump
C:\leQWkw\tlsdump\readme.txt
C:\pAXehsPqeZ\*
C:\pAXehsPqeZ\debugger
C:\pAXehsPqeZ\debugger\readme.txt
C:\pAXehsPqeZ\drop
C:\pAXehsPqeZ\drop\readme.txt
C:\pAXehsPqeZ\files
C:\pAXehsPqeZ\files\readme.txt
C:\pAXehsPqeZ\logs
C:\pAXehsPqeZ\logs\readme.txt
C:\pAXehsPqeZ\memory
C:\pAXehsPqeZ\memory\readme.txt
C:\pAXehsPqeZ\shots
C:\pAXehsPqeZ\shots\readme.txt
C:\pAXehsPqeZ\tlsdump
C:\pAXehsPqeZ\tlsdump\readme.txt
C:\PerfLogs\*
C:\Program Files\*
C:\Program Files\7-Zip
C:\Program Files\7-Zip\readme.txt
C:\Program Files\Archivos comunes
C:\Program Files\Archivos comunes\readme.txt
C:\Program Files\Common Files
C:\Program Files\Common Files\readme.txt
C:\Program Files\desktop.ini
C:\Program Files\Google
C:\Program Files\Google\readme.txt
C:\Program Files\Internet Explorer
C:\Program Files\Internet Explorer\readme.txt
C:\Program Files\Microsoft Update Health Tools
C:\Program Files\Microsoft Update Health Tools\readme.txt
C:\Program Files\RUXIM
C:\Program Files\RUXIM\readme.txt
C:\Program Files\Uninstall Information
C:\Program Files\Uninstall Information\readme.txt
C:\Program Files\VideoLAN
C:\Program Files\VideoLAN\readme.txt
C:\Program Files (x86)\*
C:\Program Files (x86)\Common Files
C:\Program Files (x86)\Common Files\readme.txt
C:\Program Files (x86)\desktop.ini
C:\Program Files (x86)\Google
C:\Program Files (x86)\Google\readme.txt
C:\Program Files (x86)\Internet Explorer
C:\Program Files (x86)\Internet Explorer\readme.txt
C:\Program Files (x86)\Microsoft
C:\Program Files (x86)\Microsoft\readme.txt
C:\Program Files (x86)\Microsoft.NET
C:\Program Files (x86)\Microsoft.NET\readme.txt
C:\ProgramData\*
C:\ProgramData\Datos de programa
C:\ProgramData\Datos de programa\readme.txt
C:\ProgramData\Documentos
C:\ProgramData\Documentos\readme.txt
C:\ProgramData\Escritorio
C:\ProgramData\Escritorio\readme.txt
C:\ProgramData\Men\xfa Inicio
C:\ProgramData\Men\xfa Inicio\readme.txt
C:\ProgramData\Microsoft
C:\ProgramData\Microsoft\readme.txt
C:\ProgramData\Microsoft OneDrive
C:\ProgramData\Microsoft OneDrive\readme.txt
C:\ProgramData\Package Cache
C:\ProgramData\Package Cache\readme.txt
C:\ProgramData\Packages
C:\ProgramData\Packages\readme.txt
C:\ProgramData\Plantillas
C:\ProgramData\Plantillas\readme.txt
C:\ProgramData\regid.1991-06.com.microsoft
C:\ProgramData\regid.1991-06.com.microsoft\readme.txt
C:\ProgramData\SoftwareDistribution
C:\ProgramData\SoftwareDistribution\readme.txt
C:\ProgramData\ssh
C:\ProgramData\ssh\readme.txt
C:\ProgramData\USOPrivate
C:\ProgramData\USOPrivate\readme.txt
C:\ProgramData\USOShared
C:\ProgramData\USOShared\readme.txt
C:\qFosxWEw\*
C:\qFosxWEw\CAPE
C:\qFosxWEw\CAPE\readme.txt
C:\qFosxWEw\drop
C:\qFosxWEw\drop\readme.txt
C:\qFosxWEw\files
C:\qFosxWEw\files\readme.txt
C:\qFosxWEw\logs
C:\qFosxWEw\logs\readme.txt
C:\qFosxWEw\memory
C:\qFosxWEw\memory\readme.txt
C:\qFosxWEw\shots
C:\qFosxWEw\shots\readme.txt
C:\qFosxWEw\tlsdump
C:\qFosxWEw\tlsdump\readme.txt
C:\Recovery\*
C:\Recovery\OEM
C:\Recovery\OEM\readme.txt
C:\sjVjjdVWyc\*
C:\sjVjjdVWyc\drop
C:\sjVjjdVWyc\drop\readme.txt
C:\sjVjjdVWyc\files
C:\sjVjjdVWyc\files\readme.txt
C:\sjVjjdVWyc\logs
C:\sjVjjdVWyc\logs\readme.txt
C:\sjVjjdVWyc\memory
C:\sjVjjdVWyc\memory\readme.txt
C:\sjVjjdVWyc\shots
C:\sjVjjdVWyc\shots\readme.txt
C:\sjVjjdVWyc\tlsdump
C:\sjVjjdVWyc\tlsdump\readme.txt
C:\System Volume Information\*
C:\System Volume Information\IndexerVolumeGuid
C:\System Volume Information\MountPointManagerRemoteDatabase
C:\System Volume Information\tracking.log
C:\System Volume Information\WPSettings.dat
C:\Temp\*
C:\tmp228rx8rl\*
C:\tmp228rx8rl\analysis.conf
C:\tmp228rx8rl\analyzer.py
C:\tmp228rx8rl\bin
C:\tmp228rx8rl\bin\readme.txt
C:\tmp228rx8rl\data
C:\tmp228rx8rl\data\readme.txt
C:\tmp228rx8rl\dll
C:\tmp228rx8rl\dll\readme.txt
C:\tmp228rx8rl\lib
C:\tmp228rx8rl\lib\readme.txt
C:\tmp228rx8rl\modules
C:\tmp228rx8rl\modules\readme.txt
C:\tmp228rx8rl\pytest.ini
C:\tmp228rx8rl\tests
C:\tmp228rx8rl\tests\readme.txt
C:\tmp3bs9izg4\*
C:\tmp3bs9izg4\analysis.conf
C:\tmp3bs9izg4\analyzer.py
C:\tmp3bs9izg4\bin
C:\tmp3bs9izg4\bin\readme.txt
C:\tmp3bs9izg4\data
C:\tmp3bs9izg4\data\readme.txt
C:\tmp3bs9izg4\dll
C:\tmp3bs9izg4\dll\readme.txt
C:\tmp3bs9izg4\lib
C:\tmp3bs9izg4\lib\readme.txt
C:\tmp3bs9izg4\modules
C:\tmp3bs9izg4\modules\readme.txt
C:\tmp3bs9izg4\pytest.ini
C:\tmp3bs9izg4\tests
C:\tmp3bs9izg4\tests\readme.txt
C:\tmp3ljmycja\*
C:\tmp3ljmycja\analysis.conf
C:\tmp3ljmycja\analyzer.py
C:\tmp3ljmycja\bin
C:\tmp3ljmycja\bin\readme.txt
C:\tmp3ljmycja\data
C:\tmp3ljmycja\data\readme.txt
C:\tmp3ljmycja\dll
C:\tmp3ljmycja\dll\readme.txt
C:\tmp3ljmycja\lib
C:\tmp3ljmycja\lib\readme.txt
C:\tmp3ljmycja\modules
C:\tmp3ljmycja\modules\readme.txt
C:\tmp3ljmycja\pytest.ini
C:\tmp3ljmycja\tests
C:\tmp3ljmycja\tests\readme.txt
C:\tmpb9ol310j\*
C:\tmpb9ol310j\analysis.conf
C:\tmpb9ol310j\analyzer.py
C:\tmpb9ol310j\bin
C:\tmpb9ol310j\bin\readme.txt
C:\tmpb9ol310j\data
C:\tmpb9ol310j\data\readme.txt
C:\tmpb9ol310j\dll
C:\tmpb9ol310j\dll\readme.txt
C:\tmpb9ol310j\lib
C:\tmpb9ol310j\lib\readme.txt
C:\tmpb9ol310j\modules
C:\tmpb9ol310j\modules\readme.txt
C:\tmpb9ol310j\pytest.ini
C:\tmpb9ol310j\tests
C:\tmpb9ol310j\tests\readme.txt
C:\tmpcynaajs6\*
C:\tmpcynaajs6\analysis.conf
C:\tmpcynaajs6\analyzer.py
C:\tmpcynaajs6\bin
C:\tmpcynaajs6\bin\readme.txt
C:\tmpcynaajs6\data
C:\tmpcynaajs6\data\readme.txt
C:\tmpcynaajs6\dll
C:\tmpcynaajs6\dll\readme.txt
C:\tmpcynaajs6\lib
C:\tmpcynaajs6\lib\readme.txt
C:\tmpcynaajs6\modules
C:\tmpcynaajs6\modules\readme.txt
C:\tmpcynaajs6\pytest.ini
C:\tmpcynaajs6\tests
C:\tmpcynaajs6\tests\readme.txt
C:\tmpd5tr1_rv\*
C:\tmpd5tr1_rv\analysis.conf
C:\tmpd5tr1_rv\analyzer.py
C:\tmpd5tr1_rv\bin
C:\tmpd5tr1_rv\bin\readme.txt
C:\tmpd5tr1_rv\data
C:\tmpd5tr1_rv\data\readme.txt
C:\tmpd5tr1_rv\dll
C:\tmpd5tr1_rv\dll\readme.txt
C:\tmpd5tr1_rv\lib
C:\tmpd5tr1_rv\lib\readme.txt
C:\tmpd5tr1_rv\modules
C:\tmpd5tr1_rv\modules\readme.txt
C:\tmpd5tr1_rv\pytest.ini
C:\tmpd5tr1_rv\tests
C:\tmpd5tr1_rv\tests\readme.txt
C:\tmpeoix3ml5\*
C:\tmpeoix3ml5\analysis.conf
C:\tmpeoix3ml5\analyzer.py
C:\tmpeoix3ml5\bin
C:\tmpeoix3ml5\bin\readme.txt
C:\tmpeoix3ml5\data
C:\tmpeoix3ml5\data\readme.txt
C:\tmpeoix3ml5\dll
C:\tmpeoix3ml5\dll\readme.txt
C:\604.ini.basta
C:\640.ini.basta
C:\tmp228rx8rl\analysis.conf.basta
C:\tmp228rx8rl\pytest.ini.basta
C:\tmp3bs9izg4\pytest.ini.basta
C:\tmpeoix3ml5\lib
C:\tmpeoix3ml5\lib\readme.txt
C:\tmpeoix3ml5\modules\readme.txt
C:\tmpeoix3ml5\tests\readme.txt
C:\tmph_w19omx\analysis.conf
C:\tmph_w19omx\analyzer.py
C:\tmph_w19omx\bin
C:\tmph_w19omx\bin\readme.txt
C:\tmph_w19omx\data
C:\tmph_w19omx\data\readme.txt
C:\tmph_w19omx\dll
C:\tmph_w19omx\dll\readme.txt
C:\tmph_w19omx\lib\readme.txt
C:\tmph_w19omx\modules
C:\tmph_w19omx\modules\readme.txt
C:\tmph_w19omx\pytest.ini
C:\tmph_w19omx\tests
C:\tmph_w19omx\tests\readme.txt
C:\tmpsv59hb03\
C:\tmpsv59hb03\analyzer.py
C:\tmpsv59hb03\bin
C:\tmpsv59hb03\bin\readme.txt
C:\tmpsv59hb03\data
C:\tmpsv59hb03\data\readme.txt
C:\tmpsv59hb03\dll
C:\tmpsv59hb03\dll\readme.txt
C:\tmpsv59hb03\lib
C:\tmpsv59hb03\modules\readme.txt
C:\tmpsv59hb03\pytest.ini
C:\tmpsv59hb03\tests
C:\tmpsv59hb03\tests\readme.txt
C:\tmpugscyilj\*
C:\tmpugscyilj\analysis.conf
C:\tmpugscyilj\analyzer.py
C:\tmpugscyilj\bin
C:\tmpugscyilj\bin\readme.txt
C:\tmpugscyilj\data
C:\tmpugscyilj\data\readme.txt
C:\tmpugscyilj\dll
C:\tmpugscyilj\dll\readme.txt
C:\tmpugscyilj\lib
C:\tmpugscyilj\lib\readme.txt
C:\tmpugscyilj\modules
C:\tmpugscyilj\modules\readme.txt
C:\tmpugscyilj\pytest.ini
C:\tmpugscyilj\tests
C:\tmpugscyilj\tests\readme.txt
C:\tmpxa6n6jlb\*
C:\tmpxa6n6jlb\analysis.conf
C:\tmpxa6n6jlb\analyzer.py
C:\tmpxa6n6jlb\bin
C:\tmpxa6n6jlb\bin\readme.txt
C:\tmpxa6n6jlb\data
C:\tmpxa6n6jlb\data\readme.txt
C:\tmpxa6n6jlb\dll
C:\tmpxa6n6jlb\dll\readme.txt
C:\tmpxa6n6jlb\lib
C:\tmpxa6n6jlb\lib\readme.txt
C:\tmpxa6n6jlb\modules
C:\tmpxa6n6jlb\modules\readme.txt
C:\tmpxa6n6jlb\pytest.ini
C:\tmpxa6n6jlb\tests
C:\tmpb9ol310j\pytest.ini.basta
C:\tmpxa6n6jlb\tests\readme.txt
C:\tmpyhyv52bd\*
C:\tmpyhyv52bd\analysis.conf
C:\tmpyhyv52bd\analyzer.py
C:\tmpyhyv52bd\bin
C:\tmpyhyv52bd\bin\readme.txt
C:\tmpyhyv52bd\data
C:\tmpyhyv52bd\data\readme.txt
C:\tmpyhyv52bd\dll
C:\tmpyhyv52bd\dll\readme.txt
C:\tmpyhyv52bd\lib
C:\tmp3ljmycja\pytest.ini.basta
C:\tmpyhyv52bd\lib\readme.txt
C:\tmpyhyv52bd\modules
C:\tmp_4c73x2e\dll\readme.txt
C:\tmp_4c73x2e\lib
C:\tmp_4c73x2e\lib\readme.txt
C:\tmp_4c73x2e\modules
C:\tmp_4c73x2e\modules\readme.txt
C:\tmp_4c73x2e\pytest.ini
C:\tmp_4c73x2e\tests
C:\tmp_4c73x2e\tests\readme.txt
C:\Trabajo\*
C:\Users\*
C:\Users\All Users
C:\Users\All Users\readme.txt
C:\Users\Default
C:\Users\Default\readme.txt
C:\Users\Default User
C:\Users\Default User\readme.txt
C:\Users\desktop.ini
C:\Users\pacop
C:\Users\pacop\readme.txt
C:\Users\Public
C:\Users\Public\readme.txt
C:\VhGXHyPr\*
C:\VhGXHyPr\CAPE
C:\VhGXHyPr\CAPE\readme.txt
C:\VhGXHyPr\drop
C:\VhGXHyPr\drop\readme.txt
C:\VhGXHyPr\files
C:\VhGXHyPr\files\readme.txt
C:\VhGXHyPr\logs
C:\VhGXHyPr\logs\readme.txt
C:\VhGXHyPr\memory
C:\VhGXHyPr\memory\readme.txt
C:\VhGXHyPr\shots
C:\VhGXHyPr\shots\readme.txt
C:\VhGXHyPr\tlsdump
C:\VhGXHyPr\tlsdump\readme.txt
C:\VJCYHvoxA\*
C:\VJCYHvoxA\debugger
C:\VJCYHvoxA\debugger\readme.txt
C:\VJCYHvoxA\drop
C:\VJCYHvoxA\drop\readme.txt
C:\VJCYHvoxA\files
C:\VJCYHvoxA\files\readme.txt
C:\VJCYHvoxA\logs
C:\VJCYHvoxA\logs\readme.txt
C:\VJCYHvoxA\memory
C:\VJCYHvoxA\memory\readme.txt
C:\VJCYHvoxA\shots
C:\VJCYHvoxA\shots\readme.txt
C:\VJCYHvoxA\tlsdump
C:\VJCYHvoxA\tlsdump\readme.txt
C:\wJvzAqbRj\*
C:\wJvzAqbRj\drop
C:\wJvzAqbRj\drop\readme.txt
C:\wJvzAqbRj\files
C:\wJvzAqbRj\files\readme.txt
C:\wJvzAqbRj\logs
C:\wJvzAqbRj\logs\readme.txt
C:\wJvzAqbRj\memory
C:\wJvzAqbRj\memory\readme.txt
C:\wJvzAqbRj\shots
C:\wJvzAqbRj\shots\readme.txt
C:\wJvzAqbRj\tlsdump
C:\wJvzAqbRj\tlsdump\readme.txt
C:\YtGTvE\*
C:\YtGTvE\CAPE
C:\YtGTvE\CAPE\readme.txt
C:\YtGTvE\drop
C:\zKlZnVrs\logs\readme.txt
C:\zKlZnVrs\memory
C:\zKlZnVrs\memory\readme.txt
C:\zKlZnVrs\shots
C:\zKlZnVrs\shots\readme.txt
C:\tmpcynaajs6\analysis.conf.basta
C:\zKlZnVrs\tlsdump
C:\zKlZnVrs\tlsdump\readme.txt
C:\$WinREAgent\Scratch\*
C:\Archivos de programa\7-Zip\*
C:\Archivos de programa\7-Zip\7-zip.chm
C:\Archivos de programa\7-Zip\7-zip.dll
C:\Archivos de programa\7-Zip\7-zip32.dll
C:\Archivos de programa\7-Zip\7z.dll
C:\Archivos de programa\7-Zip\7z.exe
C:\Archivos de programa\7-Zip\7z.sfx
C:\Archivos de programa\7-Zip\7zCon.sfx
C:\Archivos de programa\7-Zip\7zFM.exe
C:\Archivos de programa\7-Zip\7zG.exe
C:\Archivos de programa\7-Zip\descript.ion
C:\Archivos de programa\7-Zip\History.txt
C:\Archivos de programa\7-Zip\Lang
C:\Archivos de programa\7-Zip\Lang\readme.txt
C:\Archivos de programa\7-Zip\License.txt
C:\Archivos de programa\7-Zip\Uninstall.exe
C:\Archivos de programa\Archivos comunes\*
C:\Archivos de programa\Archivos comunes\microsoft shared
C:\Archivos de programa\Archivos comunes\microsoft shared\readme.txt
C:\Archivos de programa\Archivos comunes\Services
C:\Archivos de programa\Archivos comunes\Services\readme.txt
C:\Archivos de programa\Archivos comunes\System
C:\Archivos de programa\Archivos comunes\System\readme.txt
C:\Archivos de programa\Common Files\*
C:\Archivos de programa\Common Files\microsoft shared
C:\Archivos de programa\Common Files\microsoft shared\readme.txt
C:\Archivos de programa\Common Files\Services
C:\Archivos de programa\Common Files\Services\readme.txt
C:\Archivos de programa\Common Files\System
C:\Archivos de programa\Common Files\System\readme.txt
C:\Archivos de programa\Internet Explorer\*
C:\Archivos de programa\Internet Explorer\IEShims.dll
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Archivos de programa\Internet Explorer\images
C:\Archivos de programa\Internet Explorer\images\readme.txt
C:\Archivos de programa\Internet Explorer\SIGNUP
C:\Archivos de programa\Internet Explorer\SIGNUP\readme.txt
C:\Archivos de programa\Internet Explorer\sqmapi.dll
C:\tmpd5tr1_rv\pytest.ini.basta
C:\tmpeoix3ml5\analysis.conf.basta
C:\tmp228rx8rl\analyzer.py.basta
C:\tmpeoix3ml5\pytest.ini
C:\tmpeoix3ml5\pytest.ini.basta
C:\Archivos de programa\Microsoft Update Health Tools\*
C:\Archivos de programa\Microsoft Update Health Tools\expediteupdater.exe
C:\Archivos de programa\Microsoft Update Health Tools\Logs
C:\Archivos de programa\Microsoft Update Health Tools\Logs\readme.txt
C:\tmph_w19omx\analysis.conf.basta
C:\Archivos de programa\Microsoft Update Health Tools\QualityUpdateAssistant.dll
C:\Archivos de programa\Microsoft Update Health Tools\sedplugins.dll
C:\Archivos de programa\Microsoft Update Health Tools\uhssvc.exe
C:\Archivos de programa\Microsoft Update Health Tools\unifiedinstaller.dll
C:\tmpb9ol310j\analyzer.py.basta
C:\tmph_w19omx\pytest.ini.basta
C:\tmpsv59hb03\analysis.conf
C:\tmpsv59hb03\analysis.conf.basta
C:\tmpcynaajs6\analyzer.py.basta
C:\tmpsv59hb03\pytest.ini.basta
C:\tmpugscyilj\analysis.conf.basta
C:\Archivos de programa\RUXIM\*
C:\Archivos de programa\RUXIM\ar-SA\readme.txt
C:\Archivos de programa\RUXIM\Assets
C:\Archivos de programa\RUXIM\Assets\readme.txt
C:\Archivos de programa\RUXIM\cs-cz\readme.txt
C:\Archivos de programa\RUXIM\da-dk
C:\Archivos de programa\RUXIM\da-dk\readme.txt
C:\Archivos de programa\RUXIM\de-DE
C:\Archivos de programa\RUXIM\de-DE\readme.txt
C:\Archivos de programa\RUXIM\DTUDriver.exe
C:\Archivos de programa\RUXIM\el-gr\readme.txt
C:\Archivos de programa\RUXIM\en-gb\readme.txt
C:\Archivos de programa\RUXIM\en-us
C:\Archivos de programa\RUXIM\en-us\readme.txt
C:\Archivos de programa\RUXIM\es-es
C:\Archivos de programa\RUXIM\es-MX\readme.txt
C:\Archivos de programa\RUXIM\et-ee
C:\Archivos de programa\RUXIM\et-ee\readme.txt
C:\Archivos de programa\RUXIM\fi-fi
C:\Archivos de programa\RUXIM\fi-fi\readme.txt
C:\Archivos de programa\RUXIM\fr-CA
C:\Archivos de programa\RUXIM\fr-CA\readme.txt
C:\Archivos de programa\RUXIM\fr-FR
C:\Archivos de programa\RUXIM\fr-FR\readme.txt
C:\Archivos de programa\RUXIM\he-IL
C:\Archivos de programa\RUXIM\he-IL\readme.txt
C:\Archivos de programa\RUXIM\hr-hr
C:\Archivos de programa\RUXIM\hr-hr\readme.txt
C:\Archivos de programa\RUXIM\hu-hu
C:\Archivos de programa\RUXIM\hu-hu\readme.txt
C:\Archivos de programa\RUXIM\it-it
C:\Archivos de programa\RUXIM\it-it\readme.txt
C:\Archivos de programa\RUXIM\ja-JP
C:\Archivos de programa\RUXIM\ja-JP\readme.txt
C:\Archivos de programa\RUXIM\ko-kr
C:\Archivos de programa\RUXIM\ko-kr\readme.txt
C:\Archivos de programa\RUXIM\lt-lt
C:\Archivos de programa\RUXIM\lt-lt\readme.txt
C:\Archivos de programa\RUXIM\lv-lv
C:\Archivos de programa\RUXIM\lv-lv\readme.txt
C:\Archivos de programa\RUXIM\nb-no
C:\Archivos de programa\RUXIM\nb-no\readme.txt
C:\Archivos de programa\RUXIM\nl-NL
C:\Archivos de programa\RUXIM\nl-NL\readme.txt
C:\Archivos de programa\RUXIM\pl-pl
C:\Archivos de programa\RUXIM\pl-pl\readme.txt
C:\Archivos de programa\RUXIM\PLUGScheduler.exe
C:\Archivos de programa\RUXIM\plugscheduler.xml
C:\Archivos de programa\RUXIM\pt-br
C:\Archivos de programa\RUXIM\pt-br\readme.txt
C:\Archivos de programa\RUXIM\pt-pt
C:\Archivos de programa\RUXIM\pt-pt\readme.txt
C:\Archivos de programa\RUXIM\resources.pri
C:\Archivos de programa\RUXIM\ro-ro
C:\Archivos de programa\RUXIM\ro-ro\readme.txt
C:\Archivos de programa\RUXIM\ru-RU
C:\Archivos de programa\RUXIM\ru-RU\readme.txt
C:\Archivos de programa\RUXIM\RUXIMICS.exe
C:\Archivos de programa\RUXIM\RUXIMIH.exe
C:\Archivos de programa\RUXIM\RUXIMPHDialogHandlers.dll
C:\Archivos de programa\RUXIM\RUXIMUXResources.dll
C:\Archivos de programa\RUXIM\sk-sk
C:\Archivos de programa\RUXIM\sk-sk\readme.txt
C:\Archivos de programa\RUXIM\sl-si
C:\Archivos de programa\RUXIM\sl-si\readme.txt
C:\Archivos de programa\RUXIM\sr-Latn-RS
C:\Archivos de programa\RUXIM\sr-Latn-RS\readme.txt
C:\Archivos de programa\RUXIM\sv-se
C:\Archivos de programa\RUXIM\sv-se\readme.txt
C:\Archivos de programa\RUXIM\SystemEvaluator.dll
C:\Archivos de programa\RUXIM\th-th
C:\Archivos de programa\RUXIM\th-th\readme.txt
C:\Archivos de programa\RUXIM\tr-tr
C:\Archivos de programa\RUXIM\tr-tr\readme.txt
C:\Archivos de programa\RUXIM\uk-ua
C:\Archivos de programa\RUXIM\uk-ua\readme.txt
C:\Archivos de programa\RUXIM\zh-cn
C:\Archivos de programa\RUXIM\zh-cn\readme.txt
C:\Archivos de programa\RUXIM\zh-TW
C:\Archivos de programa\RUXIM\zh-TW\readme.txt
C:\tmph_w19omx\analyzer.py.basta
C:\tmpugscyilj\pytest.ini.basta
C:\tmpxa6n6jlb\analysis.conf.basta
C:\tmpxa6n6jlb\analyzer.py.basta
C:\tmpxa6n6jlb\pytest.ini.basta
C:\tmpyhyv52bd\analysis.conf.basta
C:\tmpyhyv52bd\analyzer.py.basta
C:\Archivos de programa\7-Zip\7-zip.chm.basta
C:\Archivos de programa\7-Zip\7-zip.dll.basta
C:\Archivos de programa\7-Zip\7-zip32.dll.basta
C:\BykZfbvJv\drop\*
C:\BykZfbvJv\files\*
C:\BykZfbvJv\logs\*
C:\tmpugscyilj\analyzer.py.basta
C:\BykZfbvJv\memory\*
C:\BykZfbvJv\shots\*
C:\BykZfbvJv\tlsdump\*
C:\BykZfbvJv\tlsdump\tlsdump.log
C:\Archivos de programa\7-Zip\7z.sfx.basta
C:\FDwSxoT\CAPE\*
C:\FDwSxoT\CAPE\10112_12510038479926362024
C:\FDwSxoT\CAPE\10112_13487084499926362024
C:\FDwSxoT\CAPE\10112_1498053499926362024
C:\FDwSxoT\CAPE\10112_1545258569926362024
C:\FDwSxoT\CAPE\10112_1548024437261026362024
C:\FDwSxoT\CAPE\10112_1746682549926362024
C:\FDwSxoT\CAPE\10112_188635037261026362024
C:\FDwSxoT\CAPE\10112_20011035386926362024
C:\FDwSxoT\CAPE\10112_218277037261026362024
C:\FDwSxoT\CAPE\10112_22398012579926362024
C:\FDwSxoT\CAPE\10112_2855496837261026362024
C:\FDwSxoT\CAPE\10112_4317761559926362024
C:\FDwSxoT\CAPE\10112_4908850396926362024
C:\FDwSxoT\CAPE\10112_508908437261026362024
C:\FDwSxoT\CAPE\10112_588825937261026362024
C:\FDwSxoT\CAPE\10112_710079579926362024
C:\FDwSxoT\CAPE\10112_8634905386926362024
C:\FDwSxoT\CAPE\9812_13360515256926362024
C:\FDwSxoT\CAPE\9812_135927038261026362024
C:\FDwSxoT\CAPE\9812_148050256926362024
C:\FDwSxoT\CAPE\9812_25476220266926362024
C:\FDwSxoT\CAPE\9812_2771352037261026362024
C:\FDwSxoT\CAPE\9812_403704038261026362024
C:\FDwSxoT\CAPE\9812_514455737261026362024
C:\FDwSxoT\CAPE\9812_541350037261026362024
C:\FDwSxoT\CAPE\9812_5610038261026362024
C:\FDwSxoT\CAPE\9812_64116276926362024
C:\FDwSxoT\CAPE\9812_698113637261026362024
C:\FDwSxoT\CAPE\9812_702293538261026362024
C:\FDwSxoT\CAPE\9812_728209238261026362024
C:\FDwSxoT\CAPE\9812_741427238261026362024
C:\FDwSxoT\CAPE\9812_804804256926362024
C:\FDwSxoT\CAPE\9812_885312266926362024
C:\FDwSxoT\CAPE\9812_8924546376926362024
C:\tmp3ljmycja\analyzer.py.basta
C:\Archivos de programa\7-Zip\7zCon.sfx.basta
C:\Archivos de programa\7-Zip\7z.exe.basta
C:\Archivos de programa\7-Zip\descript.ion.basta
C:\Archivos de programa\7-Zip\History.txt.basta
C:\Archivos de programa\7-Zip\License.txt.basta
C:\Archivos de programa\7-Zip\Uninstall.exe.basta
C:\Archivos de programa\Internet Explorer\ExtExport.exe
C:\Archivos de programa\Internet Explorer\hmmapi.dll
C:\Archivos de programa\Internet Explorer\iediagcmd.exe
C:\Archivos de programa\Internet Explorer\ieinstal.exe
C:\Archivos de programa\Internet Explorer\ielowutil.exe
C:\tmpd5tr1_rv\analyzer.py.basta
C:\Archivos de programa\Microsoft Update Health Tools\expediteupdater.exe.basta
C:\Archivos de programa\7-Zip\7zFM.exe.basta
C:\tmp3bs9izg4\analyzer.py.basta
C:\Archivos de programa\Microsoft Update Health Tools\unifiedinstaller.dll.basta
C:\Archivos de programa\RUXIM\DTUDriver.exe.basta
C:\Archivos de programa\RUXIM\plugscheduler.xml.basta
C:\Archivos de programa\RUXIM\resources.pri.basta
C:\Archivos de programa\7-Zip\7zG.exe.basta
C:\Archivos de programa\Microsoft Update Health Tools\QualityUpdateAssistant.dll.basta
C:\Archivos de programa\RUXIM\RUXIMUXResources.dll.basta
C:\Archivos de programa\Microsoft Update Health Tools\uhssvc.exe.basta
C:\BykZfbvJv\CAPE\5368_1025171522201127462024
C:\BykZfbvJv\CAPE\5368_1025171522201127462024.basta
C:\BykZfbvJv\CAPE\5368_178396430927462024
C:\BykZfbvJv\CAPE\5368_178396430927462024.basta
C:\BykZfbvJv\CAPE\5368_299646040927462024
C:\BykZfbvJv\CAPE\5368_299646040927462024.basta
C:\BykZfbvJv\CAPE\5368_410803130927462024
C:\BykZfbvJv\CAPE\5368_410803130927462024.basta
C:\BykZfbvJv\CAPE\5368_456264422201127462024
C:\Archivos de programa\RUXIM\RUXIMPHDialogHandlers.dll.basta
C:\BykZfbvJv\CAPE\5368_597069030927462024
C:\BykZfbvJv\CAPE\5368_456264422201127462024.basta
C:\BykZfbvJv\CAPE\5368_93744519201127462024
C:\BykZfbvJv\CAPE\5368_597069030927462024.basta
C:\BykZfbvJv\tlsdump\tlsdump.log.basta
C:\FDwSxoT\CAPE\10112_1071445386926362024
C:\BykZfbvJv\CAPE\5368_93744519201127462024.basta
C:\FDwSxoT\CAPE\10112_11462272489926362024
C:\FDwSxoT\CAPE\10112_1071445386926362024.basta
C:\FDwSxoT\CAPE\10112_12510038479926362024.basta
C:\Archivos de programa\RUXIM\RUXIMIH.exe.basta
C:\FDwSxoT\CAPE\10112_1498053499926362024.basta
C:\FDwSxoT\drop\*
C:\FDwSxoT\logs\*
C:\FDwSxoT\CAPE\10112_1548024437261026362024.basta
C:\FDwSxoT\memory\*
C:\FDwSxoT\memory\10112.dmp
C:\FDwSxoT\memory\3748.dmp
C:\FDwSxoT\CAPE\10112_1746682549926362024.basta
C:\FDwSxoT\memory\4840.dmp
C:\FDwSxoT\memory\6688.dmp
C:\FDwSxoT\memory\7488.dmp
C:\FDwSxoT\CAPE\10112_188635037261026362024.basta
C:\FDwSxoT\CAPE\10112_20011035386926362024.basta
C:\FDwSxoT\memory\8492.dmp
C:\FDwSxoT\memory\9812.dmp
C:\FDwSxoT\shots\*
C:\FDwSxoT\tlsdump\*
C:\FDwSxoT\tlsdump\tlsdump.log
C:\FDwSxoT\CAPE\10112_218277037261026362024.basta
C:\Archivos de programa\RUXIM\SystemEvaluator.dll.basta
C:\FDwSxoT\CAPE\10112_22401508549926362024
C:\FDwSxoT\CAPE\10112_22398012579926362024.basta
C:\FDwSxoT\CAPE\10112_2855496837261026362024.basta
C:\JeMgNHV\debugger\*
C:\JeMgNHV\debugger\5156.log
C:\JeMgNHV\drop\*
C:\JeMgNHV\files\*
C:\JeMgNHV\logs\*
C:\JeMgNHV\memory\*
C:\JeMgNHV\shots\*
C:\kSSIhSwY\CAPE\*
C:\kSSIhSwY\CAPE\4844_1090910516501227462024
C:\kSSIhSwY\CAPE\4844_225977216501227462024
C:\kSSIhSwY\CAPE\4844_59174881650627462024
C:\kSSIhSwY\drop\*
C:\kSSIhSwY\files\*
C:\kSSIhSwY\logs\*
C:\kSSIhSwY\memory\*
C:\kSSIhSwY\shots\*
C:\kSSIhSwY\tlsdump\*
C:\kSSIhSwY\tlsdump\tlsdump.log
C:\leQWkw\drop\*
C:\leQWkw\files\*
C:\leQWkw\logs\*
C:\leQWkw\memory\*
C:\leQWkw\shots\*
C:\leQWkw\tlsdump\*
C:\leQWkw\tlsdump\tlsdump.log
C:\pAXehsPqeZ\debugger\*
C:\pAXehsPqeZ\debugger\7508.log
C:\pAXehsPqeZ\drop\*
C:\pAXehsPqeZ\files\*
C:\pAXehsPqeZ\logs\*
C:\pAXehsPqeZ\shots\*
C:\pAXehsPqeZ\tlsdump\*
C:\Program Files\7-Zip\*
C:\Program Files\7-Zip\7-zip.chm.basta
C:\Program Files\7-Zip\7-zip.dll.basta
C:\Program Files\7-Zip\7-zip32.dll.basta
C:\FDwSxoT\CAPE\10112_4317761559926362024.basta
C:\Program Files\7-Zip\7z.dll
C:\Program Files\7-Zip\7z.exe.basta
C:\Program Files\7-Zip\7z.sfx.basta
C:\Program Files\7-Zip\7zCon.sfx.basta
C:\Program Files\7-Zip\7zFM.exe.basta
C:\Program Files\7-Zip\7zG.exe.basta
C:\Program Files\7-Zip\descript.ion.basta
C:\Program Files\7-Zip\History.txt.basta
C:\Program Files\7-Zip\Lang
C:\Program Files\7-Zip\Lang\readme.txt
C:\Program Files\7-Zip\License.txt.basta
C:\Program Files\7-Zip\Uninstall.exe.basta
C:\FDwSxoT\CAPE\10112_4908850396926362024.basta
C:\FDwSxoT\CAPE\10112_508908437261026362024.basta
C:\FDwSxoT\CAPE\10112_588825937261026362024.basta
C:\FDwSxoT\CAPE\10112_8634905386926362024.basta
C:\FDwSxoT\CAPE\9812_13360515256926362024.basta
C:\Archivos de programa\Microsoft Update Health Tools\sedplugins.dll.basta
C:\FDwSxoT\CAPE\10112_710079579926362024.basta
C:\FDwSxoT\CAPE\9812_148050256926362024.basta
C:\FDwSxoT\CAPE\9812_25476220266926362024.basta
C:\FDwSxoT\CAPE\9812_403704038261026362024.basta
C:\FDwSxoT\CAPE\9812_2771352037261026362024.basta
C:\FDwSxoT\CAPE\9812_514455737261026362024.basta
C:\Program Files\Archivos comunes\*
C:\Program Files\Archivos comunes\microsoft shared
C:\Program Files\Archivos comunes\microsoft shared\readme.txt
C:\Program Files\Archivos comunes\Services
C:\Program Files\Archivos comunes\Services\readme.txt
C:\Program Files\Archivos comunes\System
C:\Program Files\Archivos comunes\System\readme.txt
C:\Program Files\Common Files\*
C:\Program Files\Common Files\microsoft shared
C:\Program Files\Common Files\microsoft shared\readme.txt
C:\Program Files\Common Files\System
C:\Program Files\Common Files\System\readme.txt
C:\Program Files\Google\*
C:\Program Files\Google\Chrome
C:\Program Files\Google\Chrome\readme.txt
C:\Program Files\Internet Explorer\*
C:\Program Files\Internet Explorer\en-US
C:\Program Files\Internet Explorer\en-US\readme.txt
C:\Program Files\Internet Explorer\es-ES
C:\Program Files\Internet Explorer\es-ES\readme.txt
C:\Program Files\Internet Explorer\ExtExport.exe
C:\Program Files\Internet Explorer\hmmapi.dll
C:\Program Files\Internet Explorer\iediagcmd.exe
C:\Program Files\Internet Explorer\ieinstal.exe
C:\Program Files\Internet Explorer\ielowutil.exe
C:\Program Files\Internet Explorer\IEShims.dll
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\images
C:\Program Files\Internet Explorer\images\readme.txt
C:\Program Files\Internet Explorer\SIGNUP
C:\Program Files\Internet Explorer\SIGNUP\readme.txt
C:\Program Files\Internet Explorer\sqmapi.dll
C:\FDwSxoT\CAPE\9812_5610038261026362024.basta
C:\FDwSxoT\CAPE\9812_64116276926362024.basta
C:\FDwSxoT\CAPE\9812_698113637261026362024.basta
C:\FDwSxoT\CAPE\10112_13487084499926362024.basta
C:\Archivos de programa\7-Zip\7z.dll.basta
C:\FDwSxoT\CAPE\9812_702293538261026362024.basta
C:\FDwSxoT\CAPE\9812_804804256926362024.basta
C:\FDwSxoT\CAPE\9812_741427238261026362024.basta
C:\FDwSxoT\CAPE\9812_728209238261026362024.basta
C:\FDwSxoT\CAPE\9812_8924546376926362024.basta
C:\FDwSxoT\CAPE\10112_11462272489926362024.basta
C:\FDwSxoT\CAPE\10112_1545258569926362024.basta
C:\FDwSxoT\CAPE\9812_135927038261026362024.basta
C:\Program Files\Microsoft Update Health Tools\*
C:\Program Files\Microsoft Update Health Tools\expediteupdater.exe.basta
C:\Program Files\Microsoft Update Health Tools\Logs
C:\Program Files\Microsoft Update Health Tools\Logs\readme.txt
C:\Program Files\Microsoft Update Health Tools\QualityUpdateAssistant.dll.basta
C:\Program Files\Microsoft Update Health Tools\sedplugins.dll.basta
C:\Program Files\Microsoft Update Health Tools\uhssvc.exe.basta
C:\Program Files\Microsoft Update Health Tools\unifiedinstaller.dll.basta
C:\Program Files\RUXIM\*
C:\Program Files\RUXIM\ar-SA
C:\Program Files\RUXIM\ar-SA\readme.txt
C:\Program Files\RUXIM\Assets
C:\Program Files\RUXIM\Assets\readme.txt
C:\Program Files\RUXIM\bg-bg
C:\Program Files\RUXIM\bg-bg\readme.txt
C:\Program Files\RUXIM\cs-cz
C:\Program Files\RUXIM\cs-cz\readme.txt
C:\Program Files\RUXIM\da-dk
C:\Program Files\RUXIM\da-dk\readme.txt
C:\Program Files\RUXIM\de-DE
C:\Program Files\RUXIM\de-DE\readme.txt
C:\Program Files\RUXIM\DTUDriver.exe.basta
C:\Program Files\RUXIM\el-gr
C:\Program Files\RUXIM\el-gr\readme.txt
C:\Program Files\RUXIM\en-gb
C:\Program Files\RUXIM\en-gb\readme.txt
C:\Program Files\RUXIM\en-us
C:\Program Files\RUXIM\en-us\readme.txt
C:\Program Files\RUXIM\es-es\readme.txt
C:\Program Files\RUXIM\es-MX
C:\Program Files\RUXIM\es-MX\readme.txt
C:\Program Files\RUXIM\et-ee
C:\Program Files\RUXIM\et-ee\readme.txt
C:\Program Files\RUXIM\fi-fi
C:\Program Files\RUXIM\fi-fi\readme.txt
C:\Program Files\RUXIM\he-IL
C:\Program Files\RUXIM\he-IL\readme.txt
C:\Program Files\RUXIM\hr-hr
C:\Program Files\RUXIM\hr-hr\readme.txt
C:\Program Files\RUXIM\hu-hu
C:\Program Files\RUXIM\hu-hu\readme.txt
C:\Program Files\RUXIM\it-it
C:\Program Files\RUXIM\it-it\readme.txt
C:\Program Files\RUXIM\ja-JP
C:\Program Files\RUXIM\ja-JP\readme.txt
C:\Program Files\RUXIM\ko-kr
C:\Program Files\RUXIM\ko-kr\readme.txt
C:\Program Files\RUXIM\lt-lt
C:\Program Files\RUXIM\lt-lt\readme.txt
C:\Program Files\RUXIM\lv-lv
C:\Program Files\RUXIM\lv-lv\readme.txt
C:\Program Files\RUXIM\nb-no
C:\Program Files\RUXIM\nb-no\readme.txt
C:\Program Files\RUXIM\nl-NL
C:\Program Files\RUXIM\nl-NL\readme.txt
C:\Program Files\RUXIM\pl-pl
C:\Program Files\RUXIM\pl-pl\readme.txt
C:\Program Files\RUXIM\PLUGScheduler.exe
C:\Program Files\RUXIM\plugscheduler.xml.basta
C:\Program Files\RUXIM\pt-br
C:\Program Files\RUXIM\pt-br\readme.txt
C:\Program Files\RUXIM\pt-pt
C:\Program Files\RUXIM\pt-pt\readme.txt
C:\Program Files\RUXIM\resources.pri.basta
C:\Program Files\RUXIM\ro-ro
C:\Program Files\RUXIM\ro-ro\readme.txt
C:\Program Files\RUXIM\ru-RU
C:\Program Files\RUXIM\ru-RU\readme.txt
C:\Program Files\RUXIM\RUXIMICS.exe
C:\Program Files\RUXIM\RUXIMIH.exe.basta
C:\Program Files\RUXIM\RUXIMPHDialogHandlers.dll.basta
C:\Program Files\RUXIM\RUXIMUXResources.dll.basta
C:\Program Files\RUXIM\sk-sk
C:\Program Files\RUXIM\sk-sk\readme.txt
C:\Program Files\RUXIM\sl-si
C:\Program Files\RUXIM\sl-si\readme.txt
C:\Program Files\RUXIM\sr-Latn-RS
C:\Program Files\RUXIM\sr-Latn-RS\readme.txt
C:\Program Files\RUXIM\sv-se
C:\Program Files\RUXIM\sv-se\readme.txt
C:\Program Files\RUXIM\SystemEvaluator.dll.basta
C:\Program Files\RUXIM\th-th
C:\Program Files\RUXIM\th-th\readme.txt
C:\Program Files\RUXIM\tr-tr
C:\Program Files\RUXIM\tr-tr\readme.txt
C:\Program Files\RUXIM\uk-ua
C:\Program Files\RUXIM\uk-ua\readme.txt
C:\Program Files\RUXIM\zh-cn
C:\Program Files\RUXIM\zh-cn\readme.txt
C:\Program Files\RUXIM\zh-TW\readme.txt
C:\curtain.log.basta
C:\FDwSxoT\tlsdump\tlsdump.log.basta
C:\JeMgNHV\debugger\5156.log.basta
C:\kSSIhSwY\CAPE\4844_1090910516501227462024.basta
C:\Program Files\Uninstall Information\*
C:\Program Files\VideoLAN\*
C:\Program Files\VideoLAN\VLC
C:\Program Files\VideoLAN\VLC\README.txt
C:\Program Files (x86)\Common Files\*
C:\Program Files (x86)\Common Files\Microsoft Shared
C:\Program Files (x86)\Common Files\Microsoft Shared\readme.txt
C:\Program Files (x86)\Common Files\Services
C:\Program Files (x86)\Common Files\Services\readme.txt
C:\Program Files (x86)\Common Files\System
C:\Program Files (x86)\Common Files\System\readme.txt
C:\Program Files (x86)\Google\*
C:\Program Files (x86)\Google\GoogleUpdater
C:\Program Files (x86)\Google\GoogleUpdater\readme.txt
C:\Program Files (x86)\Google\Update
C:\Program Files (x86)\Google\Update\readme.txt
C:\Program Files (x86)\Internet Explorer\*
C:\Program Files (x86)\Internet Explorer\en-US
C:\Program Files (x86)\Internet Explorer\en-US\readme.txt
C:\Program Files (x86)\Internet Explorer\es-ES
C:\Program Files (x86)\Internet Explorer\es-ES\readme.txt
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Program Files (x86)\Internet Explorer\hmmapi.dll
C:\Program Files (x86)\Internet Explorer\ie9props.propdesc
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Program Files (x86)\Internet Explorer\IEShims.dll
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\images
C:\Program Files (x86)\Internet Explorer\images\readme.txt
C:\Program Files (x86)\Internet Explorer\SIGNUP
C:\Program Files (x86)\Internet Explorer\SIGNUP\readme.txt
C:\Program Files (x86)\Internet Explorer\sqmapi.dll
C:\kSSIhSwY\CAPE\4844_225977216501227462024.basta
C:\kSSIhSwY\CAPE\4844_59174881650627462024.basta
C:\kSSIhSwY\tlsdump\tlsdump.log.basta
C:\leQWkw\tlsdump\tlsdump.log.basta
C:\pAXehsPqeZ\debugger\7508.log.basta
C:\pAXehsPqeZ\tlsdump\tlsdump.log
C:\pAXehsPqeZ\tlsdump\tlsdump.log.basta
C:\Program Files (x86)\Microsoft\*
C:\Program Files (x86)\Microsoft\Edge
C:\Program Files (x86)\Microsoft\Edge\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore
C:\Program Files (x86)\Microsoft\EdgeCore\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate
C:\Program Files (x86)\Microsoft\EdgeUpdate\readme.txt
C:\Program Files (x86)\Microsoft\EdgeWebView
C:\Program Files (x86)\Microsoft\EdgeWebView\readme.txt
C:\Program Files (x86)\Microsoft\Temp
C:\Program Files (x86)\Microsoft\Temp\readme.txt
C:\Program Files (x86)\Microsoft.NET\*
C:\Program Files (x86)\Microsoft.NET\RedistList
C:\Program Files (x86)\Microsoft.NET\RedistList\readme.txt
C:\ProgramData\Datos de programa\*
C:\ProgramData\Datos de programa\Datos de programa
C:\ProgramData\Datos de programa\Datos de programa\readme.txt
C:\ProgramData\Datos de programa\Documentos
C:\ProgramData\Datos de programa\Documentos\readme.txt
C:\ProgramData\Datos de programa\Escritorio
C:\ProgramData\Datos de programa\Escritorio\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio
C:\ProgramData\Datos de programa\Men\xfa Inicio\readme.txt
C:\ProgramData\Datos de programa\Microsoft
C:\ProgramData\Datos de programa\Microsoft\readme.txt
C:\ProgramData\Datos de programa\Microsoft OneDrive
C:\ProgramData\Datos de programa\Microsoft OneDrive\readme.txt
C:\ProgramData\Datos de programa\Package Cache
C:\ProgramData\Datos de programa\Package Cache\readme.txt
C:\ProgramData\Datos de programa\Packages
C:\ProgramData\Datos de programa\Packages\readme.txt
C:\ProgramData\Datos de programa\Plantillas
C:\ProgramData\Datos de programa\regid.1991-06.com.microsoft
C:\ProgramData\Datos de programa\SoftwareDistribution
C:\ProgramData\Datos de programa\SoftwareDistribution\readme.txt
C:\ProgramData\Datos de programa\ssh
C:\ProgramData\Datos de programa\ssh\readme.txt
C:\ProgramData\Datos de programa\USOPrivate
C:\ProgramData\Datos de programa\USOPrivate\readme.txt
C:\ProgramData\Datos de programa\USOShared
C:\ProgramData\Datos de programa\USOShared\readme.txt
C:\ProgramData\Documentos\*
C:\ProgramData\Documentos\desktop.ini
C:\ProgramData\Documentos\Mi m\xfasica
C:\ProgramData\Documentos\Mi m\xfasica\readme.txt
C:\ProgramData\Documentos\Mis im\xe1genes
C:\ProgramData\Documentos\Mis im\xe1genes\readme.txt
C:\ProgramData\Documentos\Mis v\xeddeos
C:\ProgramData\Documentos\Mis v\xeddeos\readme.txt
C:\ProgramData\Escritorio\*
C:\ProgramData\Escritorio\desktop.ini
C:\ProgramData\Escritorio\Google Chrome.lnk
C:\ProgramData\Escritorio\VLC media player.lnk
C:\ProgramData\Men\xfa Inicio\*
C:\ProgramData\Men\xfa Inicio\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas
C:\ProgramData\Men\xfa Inicio\Programas\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs
C:\ProgramData\Men\xfa Inicio\Programs\readme.txt
C:\ProgramData\Microsoft\*
C:\ProgramData\Microsoft\Crypto
C:\ProgramData\Microsoft\Crypto\readme.txt
C:\ProgramData\Microsoft\DeviceSync\readme.txt
C:\ProgramData\Escritorio\Google Chrome.lnk.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP
C:\ProgramData\Microsoft\DiagnosticLogCSP\readme.txt
C:\ProgramData\Microsoft\DRM
C:\ProgramData\Microsoft\DRM\readme.txt
C:\ProgramData\Microsoft\EdgeUpdate
C:\ProgramData\Microsoft\EdgeUpdate\readme.txt
C:\ProgramData\Microsoft\Event Viewer
C:\ProgramData\Microsoft\Event Viewer\readme.txt
C:\ProgramData\Microsoft\IdentityCRL
C:\ProgramData\Microsoft\IdentityCRL\readme.txt
C:\ProgramData\Microsoft\MapData
C:\ProgramData\Microsoft\MapData\readme.txt
C:\ProgramData\Microsoft\MF
C:\ProgramData\Microsoft\MF\readme.txt
C:\ProgramData\Microsoft\NetFramework
C:\ProgramData\Microsoft\NetFramework\readme.txt
C:\ProgramData\Microsoft\Network
C:\ProgramData\Microsoft\Network\readme.txt
C:\ProgramData\Microsoft\Provisioning
C:\ProgramData\Microsoft\Provisioning\readme.txt
C:\ProgramData\Microsoft\Search
C:\ProgramData\Microsoft\Search\readme.txt
C:\ProgramData\Microsoft\Settings
C:\ProgramData\Microsoft\Settings\readme.txt
C:\ProgramData\Microsoft\SmsRouter
C:\ProgramData\Microsoft\SmsRouter\readme.txt
C:\ProgramData\Microsoft\Spectrum
C:\ProgramData\Microsoft\Spectrum\readme.txt
C:\ProgramData\Microsoft\Speech_OneCore
C:\ProgramData\Microsoft\Speech_OneCore\readme.txt
C:\ProgramData\Microsoft\Storage Health
C:\ProgramData\Microsoft\Storage Health\readme.txt
C:\ProgramData\Microsoft\User Account Pictures
C:\ProgramData\Microsoft\User Account Pictures\readme.txt
C:\ProgramData\Microsoft\Vault
C:\ProgramData\Microsoft\Vault\readme.txt
C:\ProgramData\Microsoft\WDF
C:\ProgramData\Microsoft\WDF\readme.txt
C:\ProgramData\Microsoft\WinMSIPC
C:\ProgramData\Microsoft\WinMSIPC\readme.txt
C:\ProgramData\Microsoft\WwanSvc
C:\ProgramData\Microsoft\WwanSvc\readme.txt
C:\ProgramData\Microsoft OneDrive\*
C:\ProgramData\Microsoft OneDrive\setup
C:\ProgramData\Microsoft OneDrive\setup\readme.txt
C:\ProgramData\Package Cache\*
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\readme.txt
C:\ProgramData\Packages\*
C:\ProgramData\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\readme.txt
C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Plantillas\*
C:\ProgramData\regid.1991-06.com.microsoft\*
C:\ProgramData\SoftwareDistribution\*
C:\ProgramData\ssh\*
C:\ProgramData\USOPrivate\*
C:\ProgramData\USOPrivate\UpdateStore
C:\ProgramData\USOPrivate\UpdateStore\readme.txt
C:\ProgramData\USOShared\*
C:\ProgramData\USOShared\Logs
C:\ProgramData\USOShared\Logs\readme.txt
C:\qFosxWEw\CAPE\*
C:\qFosxWEw\CAPE\8312_11630851844827462024
C:\qFosxWEw\CAPE\8312_12788001844827462024
C:\qFosxWEw\CAPE\8312_2108001944827462024
C:\qFosxWEw\CAPE\8312_45528483841827462024
C:\qFosxWEw\CAPE\8312_88614243441827462024
C:\qFosxWEw\CAPE\8312_93814203841827462024
C:\qFosxWEw\CAPE\8312_9493141844827462024
C:\qFosxWEw\drop\*
C:\qFosxWEw\files\*
C:\qFosxWEw\logs\*
C:\qFosxWEw\memory\*
C:\qFosxWEw\shots\*
C:\qFosxWEw\tlsdump\*
C:\qFosxWEw\tlsdump\tlsdump.log
C:\Recovery\OEM\*
C:\Recovery\OEM\AfterImageApply_BDB0C1E8-6951-46C4-AB7F-C07B29F462FD.cmd
C:\Recovery\OEM\ResetConfig.xml
C:\sjVjjdVWyc\drop\*
C:\sjVjjdVWyc\files\*
C:\sjVjjdVWyc\logs\*
C:\sjVjjdVWyc\memory\*
C:\sjVjjdVWyc\shots\*
C:\sjVjjdVWyc\tlsdump\*
C:\sjVjjdVWyc\tlsdump\tlsdump.log
C:\tmp228rx8rl\bin\*
C:\tmp228rx8rl\bin\autoit3.exe
C:\tmp228rx8rl\bin\fZgZRCx.exe
C:\ProgramData\Escritorio\Microsoft Edge.lnk
C:\ProgramData\Escritorio\Microsoft Edge.lnk.basta
C:\ProgramData\Escritorio\VLC media player.lnk.basta
C:\tmp228rx8rl\bin\geckodriver.exe
C:\qFosxWEw\CAPE\8312_11630851844827462024.basta
C:\tmp228rx8rl\bin\loader_x64.exe
C:\tmp228rx8rl\bin\mNEQAyDN.exe
C:\tmp228rx8rl\bin\PPLinject.exe
C:\tmp228rx8rl\bin\PPLinject64.exe
C:\tmp228rx8rl\bin\Procmon.exe
C:\tmp228rx8rl\bin\procmon.pmc
C:\tmp228rx8rl\bin\psexec.exe
C:\tmp228rx8rl\bin\signtool.exe
C:\tmp228rx8rl\data\*
C:\tmp228rx8rl\data\msix.ps1
C:\qFosxWEw\CAPE\8312_2108001944827462024.basta
C:\tmp228rx8rl\data\yara
C:\tmp228rx8rl\data\yara\readme.txt
C:\tmp228rx8rl\dll\*
C:\tmp228rx8rl\dll\664.ini
C:\tmp228rx8rl\dll\7728.ini
C:\tmp228rx8rl\dll\8324.ini
C:\tmp228rx8rl\dll\capemon.dll
C:\tmp228rx8rl\dll\capemon_x64.dll
C:\tmp228rx8rl\dll\fwyMDy.dll
C:\tmp228rx8rl\dll\ZHEhBGrl.dll
C:\tmp228rx8rl\lib\*
C:\tmp228rx8rl\lib\api
C:\tmp228rx8rl\lib\api\readme.txt
C:\tmp228rx8rl\lib\common
C:\tmp228rx8rl\lib\common\readme.txt
C:\tmp228rx8rl\lib\core
C:\tmp228rx8rl\lib\core\readme.txt
C:\tmp228rx8rl\lib\__init__.py
C:\tmp228rx8rl\lib\__pycache__
C:\tmp228rx8rl\lib\__pycache__\readme.txt
C:\tmp228rx8rl\modules\*
C:\tmp228rx8rl\modules\auxiliary
C:\tmp228rx8rl\modules\auxiliary\readme.txt
C:\tmp228rx8rl\modules\packages
C:\tmp228rx8rl\modules\packages\readme.txt
C:\tmp228rx8rl\modules\__init__.py
C:\tmp228rx8rl\modules\__pycache__
C:\tmp228rx8rl\modules\__pycache__\readme.txt
C:\tmp228rx8rl\tests\*
C:\tmp228rx8rl\tests\lib
C:\tmp228rx8rl\tests\lib\readme.txt
C:\tmp228rx8rl\tests\modules
C:\tmp228rx8rl\tests\modules\readme.txt
C:\tmp228rx8rl\tests\test_analysis_packages.py
C:\tmp228rx8rl\tests\test_analyzer.py
C:\tmp228rx8rl\tests\test_analyzer_files.py
C:\tmp228rx8rl\tests\test_analyzer_process_list.py
C:\tmp3bs9izg4\bin\*
C:\tmp3bs9izg4\bin\autoit3.exe
C:\tmp3bs9izg4\bin\geckodriver.exe
C:\tmp3bs9izg4\bin\iMftAZV.exe
C:\tmp3bs9izg4\bin\KsIgtQTW.exe
C:\tmp3bs9izg4\bin\loader.exe
C:\tmp3bs9izg4\bin\loader_x64.exe
C:\tmp3bs9izg4\bin\PPLinject.exe
C:\tmp3bs9izg4\bin\PPLinject64.exe
C:\tmp3bs9izg4\bin\Procmon.exe
C:\tmp3bs9izg4\bin\procmon.pmc
C:\tmp3bs9izg4\bin\psexec.exe
C:\tmp3bs9izg4\bin\signtool.exe
C:\qFosxWEw\CAPE\8312_45528483841827462024.basta
C:\qFosxWEw\CAPE\8312_88614243441827462024.basta
C:\qFosxWEw\CAPE\8312_93814203841827462024.basta
C:\qFosxWEw\CAPE\8312_9493141844827462024.basta
C:\qFosxWEw\tlsdump\tlsdump.log.basta
C:\Recovery\OEM\AfterImageApply_BDB0C1E8-6951-46C4-AB7F-C07B29F462FD.cmd.basta
C:\Recovery\OEM\ResetConfig.xml.basta
C:\tmp3bs9izg4\data\*
C:\tmp3bs9izg4\data\msix.ps1
C:\tmp3bs9izg4\data\yara
C:\tmp3bs9izg4\data\yara\readme.txt
C:\tmp3bs9izg4\dll\*
C:\tmp3bs9izg4\dll\10092.ini
C:\tmp3bs9izg4\dll\4908.ini
C:\tmp3bs9izg4\dll\652.ini
C:\tmp3bs9izg4\dll\668.ini
C:\tmp3bs9izg4\dll\6820.ini
C:\tmp3bs9izg4\dll\6912.ini
C:\tmp3bs9izg4\dll\764.ini
C:\tmp3bs9izg4\dll\9172.ini
C:\tmp3bs9izg4\dll\9800.ini
C:\tmp3bs9izg4\dll\9872.ini
C:\tmp3bs9izg4\dll\capemon.dll
C:\tmp3bs9izg4\dll\capemon_x64.dll
C:\tmp3bs9izg4\dll\MiOLFfQC.dll
C:\tmp3bs9izg4\dll\WMpzul.dll
C:\sjVjjdVWyc\tlsdump\tlsdump.log.basta
C:\tmp228rx8rl\bin\autoit3.exe.basta
C:\tmp228rx8rl\bin\fZgZRCx.exe.basta
C:\tmp228rx8rl\bin\geckodriver.exe.basta
C:\tmp228rx8rl\bin\loader.exe
C:\tmp228rx8rl\bin\loader.exe.basta
C:\tmp228rx8rl\bin\loader_x64.exe.basta
C:\tmp228rx8rl\bin\mNEQAyDN.exe.basta
C:\tmp228rx8rl\bin\PPLinject.exe.basta
C:\tmp228rx8rl\bin\PPLinject64.exe.basta
C:\tmp228rx8rl\bin\Procmon.exe.basta
C:\tmp228rx8rl\bin\procmon.pmc.basta
C:\tmp228rx8rl\bin\psexec.exe.basta
C:\tmp228rx8rl\bin\signtool.exe.basta
C:\tmp228rx8rl\data\msix.ps1.basta
C:\tmp228rx8rl\dll\664.ini.basta
C:\tmp228rx8rl\dll\7728.ini.basta
C:\tmp228rx8rl\dll\8324.ini.basta
C:\tmp3bs9izg4\lib\*
C:\tmp3bs9izg4\lib\common
C:\tmp3bs9izg4\lib\common\readme.txt
C:\tmp3bs9izg4\lib\core
C:\tmp3bs9izg4\lib\core\readme.txt
C:\tmp3bs9izg4\lib\__init__.py
C:\tmp3bs9izg4\lib\__pycache__
C:\tmp3bs9izg4\lib\__pycache__\readme.txt
C:\tmp3bs9izg4\modules\*
C:\tmp3bs9izg4\modules\auxiliary
C:\tmp3bs9izg4\modules\auxiliary\readme.txt
C:\tmp3bs9izg4\modules\packages
C:\tmp3bs9izg4\modules\packages\readme.txt
C:\tmp3bs9izg4\modules\__init__.py
C:\tmp3bs9izg4\modules\__pycache__
C:\tmp3bs9izg4\modules\__pycache__\readme.txt
C:\tmp3bs9izg4\tests\*
C:\tmp3bs9izg4\tests\lib
C:\tmp3bs9izg4\tests\lib\readme.txt
C:\tmp3bs9izg4\tests\modules
C:\tmp3bs9izg4\tests\modules\readme.txt
C:\tmp3bs9izg4\tests\test_analysis_packages.py
C:\tmp3bs9izg4\tests\test_analyzer.py
C:\tmp3bs9izg4\tests\test_analyzer_files.py
C:\tmp3bs9izg4\tests\test_analyzer_process_list.py
C:\tmp228rx8rl\dll\capemon.dll.basta
C:\tmp228rx8rl\dll\capemon_x64.dll.basta
C:\tmp3ljmycja\bin\*
C:\tmp3ljmycja\bin\autoit3.exe
C:\tmp3ljmycja\bin\BxQpoUlU.exe
C:\tmp3ljmycja\bin\geckodriver.exe
C:\tmp3ljmycja\bin\loader.exe
C:\tmp3ljmycja\bin\loader_x64.exe
C:\tmp3ljmycja\bin\Procmon.exe
C:\tmp3ljmycja\bin\procmon.pmc
C:\tmp3ljmycja\bin\psexec.exe
C:\tmp3ljmycja\bin\signtool.exe
C:\tmp3ljmycja\bin\TJgiMzg.exe
C:\tmp228rx8rl\dll\fwyMDy.dll.basta
C:\tmp228rx8rl\dll\ZHEhBGrl.dll.basta
C:\tmp228rx8rl\lib\__init__.py.basta
C:\tmp228rx8rl\modules\__init__.py.basta
C:\tmp228rx8rl\tests\test_analysis_packages.py.basta
C:\tmp228rx8rl\tests\test_analyzer.py.basta
C:\tmp228rx8rl\tests\test_analyzer_files.py.basta
C:\tmp228rx8rl\tests\test_analyzer_process_list.py.basta
C:\tmp3bs9izg4\bin\autoit3.exe.basta
C:\tmp3bs9izg4\bin\geckodriver.exe.basta
C:\tmp3ljmycja\data\*
C:\tmp3ljmycja\data\msix.ps1
C:\tmp3ljmycja\data\yara
C:\tmp3ljmycja\data\yara\readme.txt
C:\tmp3bs9izg4\bin\iMftAZV.exe.basta
C:\tmp3ljmycja\dll\*
C:\tmp3ljmycja\dll\AtzxdgLn.dll
C:\tmp3ljmycja\dll\capemon.dll
C:\tmp3ljmycja\dll\capemon_x64.dll
C:\tmp3ljmycja\dll\zIMuwGE.dll
C:\tmp3bs9izg4\bin\KsIgtQTW.exe.basta
C:\tmp3bs9izg4\bin\loader.exe.basta
C:\tmp3bs9izg4\bin\loader_x64.exe.basta
C:\tmp3bs9izg4\bin\PPLinject.exe.basta
C:\tmp3bs9izg4\bin\PPLinject64.exe.basta
C:\tmp3ljmycja\lib\*
C:\tmp3ljmycja\lib\api
C:\tmp3ljmycja\lib\api\readme.txt
C:\tmp3ljmycja\lib\common
C:\tmp3ljmycja\lib\common\readme.txt
C:\tmp3ljmycja\lib\core
C:\tmp3ljmycja\lib\core\readme.txt
C:\tmp3ljmycja\lib\__pycache__
C:\tmp3ljmycja\lib\__pycache__\readme.txt
C:\tmp3bs9izg4\bin\Procmon.exe.basta
C:\tmp3bs9izg4\bin\procmon.pmc.basta
C:\tmp3ljmycja\modules\*
C:\tmp3ljmycja\modules\auxiliary
C:\tmp3ljmycja\modules\packages
C:\tmp3ljmycja\modules\packages\readme.txt
C:\tmp3ljmycja\modules\__init__.py
C:\tmp3ljmycja\modules\__pycache__
C:\tmp3ljmycja\modules\__pycache__\readme.txt
C:\tmp3ljmycja\tests\*
C:\tmp3ljmycja\tests\lib
C:\tmp3ljmycja\tests\lib\readme.txt
C:\tmp3ljmycja\tests\modules
C:\tmp3ljmycja\tests\modules\readme.txt
C:\tmp3ljmycja\tests\test_analysis_packages.py
C:\tmp3ljmycja\tests\test_analyzer.py
C:\tmp3ljmycja\tests\test_analyzer_files.py
C:\tmp3ljmycja\tests\test_analyzer_process_list.py
C:\tmp3bs9izg4\bin\psexec.exe.basta
C:\tmp3bs9izg4\bin\signtool.exe.basta
C:\tmp3bs9izg4\data\msix.ps1.basta
C:\tmp3bs9izg4\dll\10092.ini.basta
C:\tmp3bs9izg4\dll\4908.ini.basta
C:\tmp3bs9izg4\dll\652.ini.basta
C:\tmp3bs9izg4\dll\668.ini.basta
C:\tmpb9ol310j\bin\*
C:\tmpb9ol310j\bin\autoit3.exe
C:\tmpb9ol310j\bin\geckodriver.exe
C:\tmpb9ol310j\bin\loader.exe
C:\tmpb9ol310j\bin\loader_x64.exe
C:\tmpb9ol310j\bin\PPLinject.exe
C:\tmpb9ol310j\bin\PPLinject64.exe
C:\tmpb9ol310j\bin\Procmon.exe
C:\tmpb9ol310j\bin\procmon.pmc
C:\tmpb9ol310j\bin\psexec.exe
C:\tmpb9ol310j\bin\signtool.exe
C:\tmpb9ol310j\bin\UJuBcdJT.exe
C:\tmp3bs9izg4\dll\6820.ini.basta
C:\tmp3bs9izg4\dll\6912.ini.basta
C:\tmp3bs9izg4\dll\764.ini.basta
C:\tmp3bs9izg4\dll\9172.ini.basta
C:\tmp3bs9izg4\dll\9800.ini.basta
C:\tmp3bs9izg4\dll\9872.ini.basta
C:\FDwSxoT\memory\7488.dmp.basta
C:\FDwSxoT\memory\6688.dmp.basta
C:\tmp3bs9izg4\dll\capemon.dll.basta
C:\tmpb9ol310j\data\*
C:\tmpb9ol310j\data\msix.ps1
C:\tmpb9ol310j\data\yara
C:\tmpb9ol310j\data\yara\readme.txt
C:\tmp3bs9izg4\dll\capemon_x64.dll.basta
C:\tmpb9ol310j\dll\*
C:\tmpb9ol310j\dll\5108.ini
C:\tmpb9ol310j\dll\5436.ini
C:\tmpb9ol310j\dll\672.ini
C:\tmpb9ol310j\dll\784.ini
C:\tmpb9ol310j\dll\8104.ini
C:\tmpb9ol310j\dll\aGuqCwX.dll
C:\tmpb9ol310j\dll\capemon.dll
C:\tmpb9ol310j\dll\capemon_x64.dll
C:\tmpb9ol310j\dll\oPPvjQM.dll
C:\tmp3bs9izg4\lib\__init__.py.basta
C:\tmp3bs9izg4\modules\__init__.py.basta
C:\tmp3bs9izg4\tests\test_analysis_packages.py.basta
C:\tmp3bs9izg4\tests\test_analyzer.py.basta
C:\tmp3bs9izg4\tests\test_analyzer_files.py.basta
C:\tmp3bs9izg4\tests\test_analyzer_process_list.py.basta
C:\tmp3bs9izg4\dll\WMpzul.dll.basta
C:\tmp3ljmycja\bin\BxQpoUlU.exe.basta
C:\tmp3ljmycja\bin\autoit3.exe.basta
C:\tmp3bs9izg4\dll\MiOLFfQC.dll.basta
C:\tmpb9ol310j\lib\*
C:\tmpb9ol310j\lib\api
C:\tmpb9ol310j\lib\api\readme.txt
C:\tmpb9ol310j\lib\common
C:\tmpb9ol310j\lib\common\readme.txt
C:\tmpb9ol310j\lib\core
C:\tmpb9ol310j\lib\core\readme.txt
C:\tmpb9ol310j\lib\__init__.py
C:\tmpb9ol310j\lib\__pycache__
C:\tmpb9ol310j\lib\__pycache__\readme.txt
C:\tmpb9ol310j\modules\*
C:\tmpb9ol310j\modules\auxiliary
C:\tmpb9ol310j\modules\auxiliary\readme.txt
C:\tmpb9ol310j\modules\packages
C:\tmpb9ol310j\modules\packages\readme.txt
C:\tmpb9ol310j\modules\__init__.py
C:\tmpb9ol310j\modules\__pycache__
C:\tmpb9ol310j\modules\__pycache__\readme.txt
C:\tmp3ljmycja\bin\loader_x64.exe.basta
C:\tmpb9ol310j\tests\*
C:\tmpb9ol310j\tests\lib
C:\tmpb9ol310j\tests\lib\readme.txt
C:\tmpb9ol310j\tests\modules
C:\tmpb9ol310j\tests\modules\readme.txt
C:\tmpb9ol310j\tests\test_analysis_packages.py
C:\tmpb9ol310j\tests\test_analyzer.py
C:\tmpb9ol310j\tests\test_analyzer_files.py
C:\tmpb9ol310j\tests\test_analyzer_process_list.py
C:\tmp3ljmycja\bin\loader.exe.basta
C:\tmp3ljmycja\bin\procmon.pmc.basta
C:\tmp3ljmycja\bin\psexec.exe.basta
C:\tmp3ljmycja\bin\signtool.exe.basta
C:\tmpcynaajs6\bin\*
C:\tmpcynaajs6\bin\autoit3.exe
C:\tmpcynaajs6\bin\geckodriver.exe
C:\tmpcynaajs6\bin\gpwkXsgs.exe
C:\tmpcynaajs6\bin\IWzvSnF.exe
C:\tmpcynaajs6\bin\loader.exe
C:\tmpcynaajs6\bin\loader_x64.exe
C:\tmpcynaajs6\bin\PPLinject.exe
C:\tmpcynaajs6\bin\PPLinject64.exe
C:\tmpcynaajs6\bin\Procmon.exe
C:\tmpcynaajs6\bin\procmon.pmc
C:\tmpcynaajs6\bin\psexec.exe
C:\tmpcynaajs6\bin\signtool.exe
C:\tmp3ljmycja\bin\TJgiMzg.exe.basta
C:\tmp3ljmycja\data\msix.ps1.basta
C:\tmp3ljmycja\dll\676.ini
C:\tmp3ljmycja\dll\676.ini.basta
C:\tmp3ljmycja\bin\geckodriver.exe.basta
C:\tmp3ljmycja\dll\AtzxdgLn.dll.basta
C:\FDwSxoT\memory\10112.dmp.basta
C:\FDwSxoT\memory\4840.dmp.basta
C:\tmp3ljmycja\lib\__init__.py
C:\tmp3ljmycja\lib\__init__.py.basta
C:\tmp3ljmycja\modules\__init__.py.basta
C:\tmp3ljmycja\tests\test_analysis_packages.py.basta
C:\tmp3ljmycja\tests\test_analyzer.py.basta
C:\tmp3ljmycja\tests\test_analyzer_files.py.basta
C:\tmp3ljmycja\tests\test_analyzer_process_list.py.basta
C:\tmpb9ol310j\bin\aFbdvLL.exe
C:\tmpcynaajs6\data\*
C:\tmpcynaajs6\data\msix.ps1
C:\tmpcynaajs6\data\yara
C:\tmpcynaajs6\data\yara\readme.txt
C:\tmpcynaajs6\dll\*
C:\tmpcynaajs6\dll\5368.ini
C:\tmpcynaajs6\dll\676.ini
C:\tmpcynaajs6\dll\7564.ini
C:\tmpcynaajs6\dll\AnoOgbz.dll
C:\tmpcynaajs6\dll\capemon.dll
C:\tmpcynaajs6\dll\capemon_x64.dll
C:\tmpcynaajs6\dll\ohiagkD.dll
C:\tmpb9ol310j\bin\aFbdvLL.exe.basta
C:\FDwSxoT\memory\3748.dmp.basta
C:\tmp3ljmycja\bin\Procmon.exe.basta
C:\tmpb9ol310j\bin\loader.exe.basta
C:\tmpb9ol310j\bin\autoit3.exe.basta
C:\tmpb9ol310j\bin\PPLinject.exe.basta
C:\tmp3ljmycja\dll\capemon.dll.basta
C:\tmpcynaajs6\lib\*
C:\tmpcynaajs6\lib\api
C:\tmpcynaajs6\lib\api\readme.txt
C:\tmpcynaajs6\lib\common
C:\tmpcynaajs6\lib\common\readme.txt
C:\tmpcynaajs6\lib\core
C:\tmpcynaajs6\lib\core\readme.txt
C:\tmpcynaajs6\lib\__init__.py
C:\tmpcynaajs6\lib\__pycache__
C:\tmpcynaajs6\lib\__pycache__\readme.txt
C:\tmpb9ol310j\bin\loader_x64.exe.basta
C:\tmpb9ol310j\bin\procmon.pmc.basta
C:\tmpcynaajs6\modules\*
C:\tmpcynaajs6\modules\auxiliary
C:\tmpcynaajs6\modules\auxiliary\readme.txt
C:\tmpcynaajs6\modules\packages
C:\tmpcynaajs6\modules\packages\readme.txt
C:\tmpcynaajs6\modules\__init__.py
C:\tmpcynaajs6\modules\__pycache__
C:\tmpcynaajs6\modules\__pycache__\readme.txt
C:\tmpcynaajs6\tests\*
C:\tmpcynaajs6\tests\lib
C:\tmpcynaajs6\tests\lib\readme.txt
C:\tmpcynaajs6\tests\modules
C:\tmpcynaajs6\tests\modules\readme.txt
C:\tmpcynaajs6\tests\test_analysis_packages.py
C:\tmpcynaajs6\tests\test_analyzer.py
C:\tmpcynaajs6\tests\test_analyzer_process_list.py
C:\tmpb9ol310j\bin\PPLinject64.exe.basta
C:\tmpb9ol310j\bin\psexec.exe.basta
C:\tmpb9ol310j\bin\signtool.exe.basta
C:\tmpb9ol310j\data\msix.ps1.basta
C:\tmpb9ol310j\dll\5108.ini.basta
C:\tmpb9ol310j\dll\5436.ini.basta
C:\tmpb9ol310j\dll\672.ini.basta
C:\tmpb9ol310j\dll\784.ini.basta
C:\tmpb9ol310j\dll\8104.ini.basta
C:\tmpd5tr1_rv\bin\*
C:\tmpd5tr1_rv\bin\AJPJZeI.exe
C:\tmpd5tr1_rv\bin\autoit3.exe
C:\tmpd5tr1_rv\bin\geckodriver.exe
C:\tmpd5tr1_rv\bin\loader.exe
C:\tmpd5tr1_rv\bin\OYBVajFt.exe
C:\tmpd5tr1_rv\bin\PPLinject.exe
C:\tmpd5tr1_rv\bin\PPLinject64.exe
C:\tmpd5tr1_rv\bin\Procmon.exe
C:\tmpd5tr1_rv\bin\procmon.pmc
C:\tmpd5tr1_rv\bin\psexec.exe
C:\tmpd5tr1_rv\bin\signtool.exe
C:\tmpb9ol310j\bin\UJuBcdJT.exe.basta
C:\tmp3ljmycja\dll\capemon_x64.dll.basta
C:\tmp3ljmycja\dll\zIMuwGE.dll.basta
C:\tmpb9ol310j\bin\geckodriver.exe.basta
C:\tmpb9ol310j\lib\__init__.py.basta
C:\tmpb9ol310j\modules\__init__.py.basta
C:\tmpb9ol310j\tests\test_analysis_packages.py.basta
C:\tmpd5tr1_rv\data\*
C:\tmpd5tr1_rv\data\msix.ps1
C:\tmpd5tr1_rv\data\yara
C:\tmpd5tr1_rv\data\yara\readme.txt
C:\tmpb9ol310j\tests\test_analyzer.py.basta
C:\tmpd5tr1_rv\dll\*
C:\tmpd5tr1_rv\dll\672.ini
C:\tmpd5tr1_rv\dll\7652.ini
C:\tmpd5tr1_rv\dll\biRxxbp.dll
C:\tmpd5tr1_rv\dll\capemon.dll
C:\tmpd5tr1_rv\dll\capemon_x64.dll
C:\tmpb9ol310j\dll\aGuqCwX.dll.basta
C:\tmpb9ol310j\tests\test_analyzer_process_list.py.basta
C:\tmpb9ol310j\tests\test_analyzer_files.py.basta
C:\tmpb9ol310j\dll\capemon.dll.basta
C:\tmpcynaajs6\bin\gpwkXsgs.exe.basta
C:\tmpcynaajs6\bin\IWzvSnF.exe.basta
C:\tmpd5tr1_rv\lib\*
C:\tmpd5tr1_rv\lib\api
C:\tmpd5tr1_rv\lib\api\readme.txt
C:\tmpd5tr1_rv\lib\common
C:\tmpd5tr1_rv\lib\common\readme.txt
C:\tmpd5tr1_rv\lib\core
C:\tmpd5tr1_rv\lib\core\readme.txt
C:\tmpd5tr1_rv\lib\__init__.py
C:\tmpd5tr1_rv\lib\__pycache__
C:\tmpd5tr1_rv\lib\__pycache__\readme.txt
C:\tmpcynaajs6\bin\loader.exe.basta
C:\tmpd5tr1_rv\modules\*
C:\tmpd5tr1_rv\modules\auxiliary
C:\tmpd5tr1_rv\modules\auxiliary\readme.txt
C:\tmpd5tr1_rv\modules\packages
C:\tmpd5tr1_rv\modules\packages\readme.txt
C:\tmpd5tr1_rv\modules\__init__.py
C:\tmpd5tr1_rv\modules\__pycache__
C:\tmpd5tr1_rv\modules\__pycache__\readme.txt
C:\tmpcynaajs6\bin\autoit3.exe.basta
C:\tmpd5tr1_rv\tests\*
C:\tmpd5tr1_rv\tests\lib
C:\tmpd5tr1_rv\tests\lib\readme.txt
C:\tmpd5tr1_rv\tests\modules
C:\tmpd5tr1_rv\tests\modules\readme.txt
C:\tmpd5tr1_rv\tests\test_analysis_packages.py
C:\tmpd5tr1_rv\tests\test_analyzer.py
C:\tmpd5tr1_rv\tests\test_analyzer_files.py
C:\tmpd5tr1_rv\tests\test_analyzer_process_list.py
C:\tmpcynaajs6\bin\loader_x64.exe.basta
C:\tmpcynaajs6\bin\PPLinject.exe.basta
C:\tmpcynaajs6\bin\PPLinject64.exe.basta
C:\tmpcynaajs6\bin\procmon.pmc.basta
C:\tmpeoix3ml5\bin\*
C:\tmpeoix3ml5\bin\autoit3.exe
C:\tmpeoix3ml5\bin\geckodriver.exe
C:\tmpeoix3ml5\bin\lHYlaISZ.exe
C:\tmpeoix3ml5\bin\loader.exe
C:\tmpeoix3ml5\bin\loader_x64.exe
C:\tmpeoix3ml5\bin\PPLinject.exe
C:\tmpeoix3ml5\bin\PPLinject64.exe
C:\tmpeoix3ml5\bin\Procmon.exe
C:\tmpeoix3ml5\bin\procmon.pmc
C:\tmpeoix3ml5\bin\psexec.exe
C:\tmpeoix3ml5\bin\signtool.exe
C:\tmpeoix3ml5\bin\Zhuvduq.exe
C:\tmpcynaajs6\bin\psexec.exe.basta
C:\tmpcynaajs6\bin\signtool.exe.basta
C:\tmpcynaajs6\data\msix.ps1.basta
C:\tmpcynaajs6\dll\5368.ini.basta
C:\tmpcynaajs6\dll\676.ini.basta
C:\tmpcynaajs6\dll\7564.ini.basta
C:\tmpb9ol310j\dll\capemon_x64.dll.basta
C:\tmpb9ol310j\bin\Procmon.exe.basta
C:\tmpb9ol310j\dll\oPPvjQM.dll.basta
C:\tmpcynaajs6\bin\geckodriver.exe.basta
C:\tmpcynaajs6\lib\__init__.py.basta
C:\tmpcynaajs6\modules\__init__.py.basta
C:\tmpeoix3ml5\data\*
C:\tmpeoix3ml5\data\msix.ps1
C:\tmpeoix3ml5\data\yara
C:\tmpeoix3ml5\data\yara\readme.txt
C:\tmpcynaajs6\tests\test_analysis_packages.py.basta
C:\tmpeoix3ml5\dll\*
C:\tmpeoix3ml5\dll\4844.ini
C:\tmpeoix3ml5\dll\672.ini
C:\tmpeoix3ml5\dll\capemon.dll
C:\tmpeoix3ml5\dll\capemon_x64.dll
C:\tmpeoix3ml5\dll\jIXOyf.dll
C:\tmpeoix3ml5\dll\xAYiJbh.dll
C:\tmpcynaajs6\tests\test_analyzer.py.basta
C:\tmpcynaajs6\tests\test_analyzer_files.py
C:\tmpcynaajs6\tests\test_analyzer_files.py.basta
C:\tmpcynaajs6\tests\test_analyzer_process_list.py.basta
C:\tmpcynaajs6\dll\AnoOgbz.dll.basta
C:\tmpd5tr1_rv\bin\AJPJZeI.exe.basta
C:\tmpcynaajs6\dll\capemon.dll.basta
C:\tmpeoix3ml5\lib\api\readme.txt
C:\tmpeoix3ml5\lib\common
C:\tmpeoix3ml5\lib\common\readme.txt
C:\tmpeoix3ml5\lib\core
C:\tmpeoix3ml5\lib\core\readme.txt
C:\tmpeoix3ml5\lib\__init__.py
C:\tmpeoix3ml5\lib\__pycache__
C:\tmpeoix3ml5\lib\__pycache__\readme.txt
C:\tmpd5tr1_rv\bin\autoit3.exe.basta
C:\tmpd5tr1_rv\bin\loader_x64.exe
C:\tmpeoix3ml5\modules
C:\tmpeoix3ml5\modules\*
C:\tmpeoix3ml5\modules\auxiliary
C:\tmpeoix3ml5\modules\auxiliary\readme.txt
C:\tmpeoix3ml5\modules\packages
C:\tmpeoix3ml5\modules\packages\readme.txt
C:\tmpeoix3ml5\modules\__init__.py
C:\tmpeoix3ml5\modules\__pycache__
C:\tmpeoix3ml5\modules\__pycache__\readme.txt
C:\tmpd5tr1_rv\bin\loader.exe.basta
C:\tmpeoix3ml5\tests
C:\tmpeoix3ml5\tests\*
C:\tmpeoix3ml5\tests\lib
C:\tmpeoix3ml5\tests\lib\readme.txt
C:\tmpeoix3ml5\tests\modules
C:\tmpeoix3ml5\tests\modules\readme.txt
C:\tmpeoix3ml5\tests\test_analysis_packages.py
C:\tmpeoix3ml5\tests\test_analyzer.py
C:\tmpeoix3ml5\tests\test_analyzer_files.py
C:\tmpeoix3ml5\tests\test_analyzer_process_list.py
C:\tmpd5tr1_rv\bin\loader_x64.exe.basta
C:\tmpd5tr1_rv\bin\PPLinject.exe.basta
C:\tmpd5tr1_rv\bin\OYBVajFt.exe.basta
C:\tmpd5tr1_rv\bin\PPLinject64.exe.basta
C:\tmpd5tr1_rv\bin\procmon.pmc.basta
C:\tmph_w19omx\bin\*
C:\tmph_w19omx\bin\autoit3.exe
C:\tmph_w19omx\bin\geckodriver.exe
C:\tmph_w19omx\bin\loader.exe
C:\tmph_w19omx\bin\loader_x64.exe
C:\tmph_w19omx\bin\PPLinject.exe
C:\tmph_w19omx\bin\PPLinject64.exe
C:\tmph_w19omx\bin\Procmon.exe
C:\tmph_w19omx\bin\procmon.pmc
C:\tmph_w19omx\bin\psexec.exe
C:\tmph_w19omx\bin\signtool.exe
C:\tmph_w19omx\bin\VSLgQYHf.exe
C:\tmph_w19omx\bin\yZqOZxK.exe
C:\tmpd5tr1_rv\bin\psexec.exe.basta
C:\tmpcynaajs6\dll\capemon_x64.dll.basta
C:\tmpd5tr1_rv\data\msix.ps1.basta
C:\tmpd5tr1_rv\dll\672.ini.basta
C:\tmpcynaajs6\dll\ohiagkD.dll.basta
C:\tmpd5tr1_rv\dll\7652.ini.basta
C:\tmpd5tr1_rv\bin\signtool.exe.basta
C:\tmpcynaajs6\bin\Procmon.exe.basta
C:\tmpd5tr1_rv\dll\yARuoZGp.dll
C:\tmpd5tr1_rv\bin\geckodriver.exe.basta
C:\tmpd5tr1_rv\lib\__init__.py.basta
C:\tmpd5tr1_rv\modules\__init__.py.basta
C:\tmpd5tr1_rv\tests\test_analysis_packages.py.basta
C:\tmph_w19omx\data\*
C:\tmph_w19omx\data\msix.ps1
C:\tmph_w19omx\data\yara
C:\tmph_w19omx\data\yara\readme.txt
C:\tmph_w19omx\dll\*
C:\tmph_w19omx\dll\10048.ini
C:\tmph_w19omx\dll\10112.ini
C:\tmph_w19omx\dll\10136.ini
C:\tmph_w19omx\dll\10196.ini
C:\tmph_w19omx\dll\2848.ini
C:\tmph_w19omx\dll\3748.ini
C:\tmph_w19omx\dll\4840.ini
C:\tmph_w19omx\dll\640.ini
C:\tmph_w19omx\dll\660.ini
C:\tmph_w19omx\dll\6688.ini
C:\tmph_w19omx\dll\7488.ini
C:\tmph_w19omx\dll\752.ini
C:\tmph_w19omx\dll\8076.ini
C:\tmph_w19omx\dll\8464.ini
C:\tmph_w19omx\dll\8492.ini
C:\tmph_w19omx\dll\9612.ini
C:\tmph_w19omx\dll\9812.ini
C:\tmph_w19omx\dll\9844.ini
C:\tmph_w19omx\dll\9848.ini
C:\tmph_w19omx\dll\capemon.dll
C:\tmph_w19omx\dll\capemon_x64.dll
C:\tmph_w19omx\dll\QnAZYtX.dll
C:\tmph_w19omx\dll\wAImEkvO.dll
C:\tmpd5tr1_rv\tests\test_analyzer.py.basta
C:\tmpd5tr1_rv\tests\test_analyzer_files.py.basta
C:\tmpd5tr1_rv\tests\test_analyzer_process_list.py.basta
C:\tmpd5tr1_rv\dll\capemon.dll.basta
C:\tmpd5tr1_rv\dll\biRxxbp.dll.basta
C:\tmpeoix3ml5\bin\autoit3.exe.basta
C:\tmpeoix3ml5\bin\loader.exe.basta
C:\tmpeoix3ml5\bin\lHYlaISZ.exe.basta
C:\tmpeoix3ml5\bin\PPLinject.exe.basta
C:\tmpeoix3ml5\bin\loader_x64.exe.basta
C:\tmpeoix3ml5\bin\PPLinject64.exe.basta
C:\tmpeoix3ml5\bin\procmon.pmc.basta
C:\tmpeoix3ml5\bin\psexec.exe.basta
C:\tmpeoix3ml5\bin\signtool.exe.basta
C:\tmpeoix3ml5\bin\Zhuvduq.exe.basta
C:\tmpeoix3ml5\data\msix.ps1.basta
C:\tmpeoix3ml5\dll\4844.ini.basta
C:\tmpeoix3ml5\dll\672.ini.basta
C:\tmpd5tr1_rv\dll\yARuoZGp.dll.basta
C:\tmpd5tr1_rv\dll\capemon_x64.dll.basta
C:\tmpd5tr1_rv\bin\Procmon.exe.basta
C:\tmpeoix3ml5\bin\geckodriver.exe.basta
C:\tmpeoix3ml5\lib\__init__.py.basta
C:\tmpeoix3ml5\modules\__init__.py.basta
C:\tmpeoix3ml5\tests\test_analysis_packages.py.basta
C:\tmph_w19omx\lib
C:\tmph_w19omx\lib\*
C:\tmph_w19omx\lib\api
C:\tmph_w19omx\lib\common
C:\tmph_w19omx\lib\core
C:\tmph_w19omx\lib\core\readme.txt
C:\tmph_w19omx\lib\__init__.py
C:\tmph_w19omx\lib\__pycache__
C:\tmph_w19omx\lib\__pycache__\readme.txt
C:\tmph_w19omx\modules\*
C:\tmph_w19omx\modules\auxiliary
C:\tmph_w19omx\modules\auxiliary\readme.txt
C:\tmph_w19omx\modules\packages
C:\tmph_w19omx\modules\packages\readme.txt
C:\tmph_w19omx\modules\__init__.py
C:\tmph_w19omx\modules\__pycache__
C:\tmph_w19omx\modules\__pycache__\readme.txt
C:\tmph_w19omx\tests\*
C:\tmph_w19omx\tests\lib
C:\tmph_w19omx\tests\lib\readme.txt
C:\tmph_w19omx\tests\modules
C:\tmph_w19omx\tests\modules\readme.txt
C:\tmph_w19omx\tests\test_analysis_packages.py
C:\tmph_w19omx\tests\test_analyzer.py
C:\tmph_w19omx\tests\test_analyzer_files.py
C:\tmph_w19omx\tests\test_analyzer_process_list.py
C:\tmpeoix3ml5\tests\test_analyzer.py.basta
C:\tmpeoix3ml5\tests\test_analyzer_files.py.basta
C:\tmpeoix3ml5\tests\test_analyzer_process_list.py.basta
C:\tmpeoix3ml5\dll\capemon.dll.basta
C:\tmpsv59hb03\bin\*
C:\tmpsv59hb03\bin\autoit3.exe
C:\tmpsv59hb03\bin\geckodriver.exe
C:\tmpsv59hb03\bin\loader.exe
C:\tmpsv59hb03\bin\loader_x64.exe
C:\tmpsv59hb03\bin\mQGRlohr.exe
C:\tmpsv59hb03\bin\ouqumVM.exe
C:\tmpsv59hb03\bin\Procmon.exe
C:\tmpsv59hb03\bin\psexec.exe
C:\tmpsv59hb03\bin\signtool.exe
C:\tmpeoix3ml5\dll\jIXOyf.dll.basta
C:\tmph_w19omx\bin\loader.exe.basta
C:\tmph_w19omx\bin\loader_x64.exe.basta
C:\tmph_w19omx\bin\autoit3.exe.basta
C:\tmph_w19omx\bin\PPLinject.exe.basta
C:\tmph_w19omx\bin\PPLinject64.exe.basta
C:\tmph_w19omx\bin\procmon.pmc.basta
C:\tmph_w19omx\bin\psexec.exe.basta
C:\tmpeoix3ml5\dll\capemon_x64.dll.basta
C:\tmph_w19omx\bin\signtool.exe.basta
C:\tmph_w19omx\bin\VSLgQYHf.exe.basta
C:\tmph_w19omx\data\msix.ps1.basta
C:\tmph_w19omx\dll\10048.ini.basta
C:\tmph_w19omx\dll\10112.ini.basta
C:\tmph_w19omx\dll\10136.ini.basta
C:\tmph_w19omx\dll\10196.ini.basta
C:\tmph_w19omx\dll\2848.ini.basta
C:\tmph_w19omx\dll\3748.ini.basta
C:\tmph_w19omx\dll\4840.ini.basta
C:\tmph_w19omx\dll\640.ini.basta
C:\tmph_w19omx\dll\660.ini.basta
C:\tmph_w19omx\dll\6688.ini.basta
C:\tmph_w19omx\dll\7488.ini.basta
C:\tmph_w19omx\dll\752.ini.basta
C:\tmph_w19omx\dll\8076.ini.basta
C:\tmph_w19omx\dll\8464.ini.basta
C:\tmph_w19omx\dll\8492.ini.basta
C:\tmph_w19omx\dll\9612.ini.basta
C:\tmph_w19omx\dll\9812.ini.basta
C:\tmph_w19omx\dll\9844.ini.basta
C:\tmph_w19omx\dll\9848.ini.basta
C:\tmpsv59hb03\data\*
C:\tmpsv59hb03\data\msix.ps1
C:\tmpsv59hb03\data\yara
C:\tmpsv59hb03\data\yara\readme.txt
C:\tmpsv59hb03\dll\*
C:\tmpsv59hb03\dll\660.ini
C:\tmpsv59hb03\dll\capemon.dll
C:\tmpsv59hb03\dll\capemon_x64.dll
C:\tmpsv59hb03\dll\JvQumA.dll
C:\tmpsv59hb03\dll\LVCETPK.dll
C:\tmpsv59hb03\lib\*
C:\tmpsv59hb03\lib\api
C:\tmpsv59hb03\lib\api\readme.txt
C:\tmpsv59hb03\lib\common
C:\tmpsv59hb03\lib\common\readme.txt
C:\tmpsv59hb03\lib\core
C:\tmpsv59hb03\lib\core\readme.txt
C:\tmpsv59hb03\lib\__init__.py
C:\tmpsv59hb03\lib\__pycache__
C:\tmpsv59hb03\lib\__pycache__\readme.txt
C:\tmpsv59hb03\modules
C:\tmpsv59hb03\modules\*
C:\tmpsv59hb03\modules\auxiliary\readme.txt
C:\tmpsv59hb03\modules\__init__.py
C:\tmpsv59hb03\modules\__pycache__
C:\tmpsv59hb03\modules\__pycache__\readme.txt
C:\tmpsv59hb03\tests\*
C:\tmpsv59hb03\tests\lib
C:\tmpsv59hb03\tests\lib\readme.txt
C:\tmpsv59hb03\tests\modules
C:\tmpsv59hb03\tests\modules\readme.txt
C:\tmpsv59hb03\tests\test_analysis_packages.py
C:\tmpsv59hb03\tests\test_analyzer.py
C:\tmpsv59hb03\tests\test_analyzer_files.py
C:\tmpsv59hb03\tests\test_analyzer_process_list.py
C:\tmpugscyilj\bin\*
C:\tmpugscyilj\bin\autoit3.exe
C:\tmpugscyilj\bin\CcLHXMEM.exe
C:\tmpugscyilj\bin\loader.exe
C:\tmpugscyilj\bin\pDCNQwo.exe
C:\tmpugscyilj\bin\PPLinject.exe
C:\tmpugscyilj\bin\PPLinject64.exe
C:\tmpugscyilj\bin\Procmon.exe
C:\tmpugscyilj\bin\procmon.pmc
C:\tmpugscyilj\bin\psexec.exe
C:\tmph_w19omx\bin\yZqOZxK.exe.basta
C:\tmpeoix3ml5\dll\xAYiJbh.dll.basta
C:\tmpeoix3ml5\bin\Procmon.exe.basta
C:\tmpugscyilj\data\*
C:\tmpugscyilj\data\msix.ps1
C:\tmpugscyilj\data\yara
C:\tmpugscyilj\data\yara\readme.txt
C:\tmph_w19omx\bin\geckodriver.exe.basta
C:\tmpugscyilj\dll\*
C:\tmpugscyilj\dll\6156.ini
C:\tmpugscyilj\dll\672.ini
C:\tmpugscyilj\dll\capemon.dll
C:\tmpugscyilj\dll\capemon_x64.dll
C:\tmpugscyilj\dll\cweSNMQP.dll
C:\tmpugscyilj\dll\lvnmWnN.dll
C:\tmph_w19omx\lib\__init__.py.basta
C:\tmph_w19omx\modules\__init__.py.basta
C:\tmph_w19omx\tests\test_analysis_packages.py.basta
C:\tmph_w19omx\tests\test_analyzer.py.basta
C:\tmph_w19omx\tests\test_analyzer_files.py.basta
C:\tmph_w19omx\tests\test_analyzer_process_list.py.basta
C:\tmph_w19omx\dll\capemon.dll.basta
C:\tmpugscyilj\lib\*
C:\tmpugscyilj\lib\api
C:\tmpugscyilj\lib\api\readme.txt
C:\tmpugscyilj\lib\common
C:\tmpugscyilj\lib\common\readme.txt
C:\tmpugscyilj\lib\core
C:\tmpugscyilj\lib\core\readme.txt
C:\tmpugscyilj\lib\__init__.py
C:\tmpugscyilj\lib\__pycache__
C:\tmpugscyilj\lib\__pycache__\readme.txt
C:\tmpsv59hb03\bin\autoit3.exe.basta
C:\tmpugscyilj\modules\*
C:\tmpugscyilj\modules\auxiliary
C:\tmpugscyilj\modules\auxiliary\readme.txt
C:\tmpugscyilj\modules\packages
C:\tmpugscyilj\modules\packages\readme.txt
C:\tmpugscyilj\modules\__init__.py
C:\tmpugscyilj\modules\__pycache__
C:\tmpugscyilj\modules\__pycache__\readme.txt
C:\tmph_w19omx\dll\wAImEkvO.dll.basta
C:\tmpugscyilj\tests\*
C:\tmpugscyilj\tests\lib
C:\tmpugscyilj\tests\lib\readme.txt
C:\tmpugscyilj\tests\modules
C:\tmpugscyilj\tests\modules\readme.txt
C:\tmpugscyilj\tests\test_analysis_packages.py
C:\tmpugscyilj\tests\test_analyzer.py
C:\tmpugscyilj\tests\test_analyzer_files.py
C:\tmpugscyilj\tests\test_analyzer_process_list.py
C:\tmpsv59hb03\bin\loader.exe.basta
C:\tmpsv59hb03\bin\loader_x64.exe.basta
C:\tmpsv59hb03\bin\mQGRlohr.exe.basta
C:\tmph_w19omx\dll\capemon_x64.dll.basta
C:\tmpsv59hb03\bin\procmon.pmc
C:\tmpxa6n6jlb\bin\*
C:\tmpxa6n6jlb\bin\autoit3.exe
C:\tmpxa6n6jlb\bin\loader.exe
C:\tmpxa6n6jlb\bin\loader_x64.exe
C:\tmpxa6n6jlb\bin\PPLinject.exe
C:\tmpxa6n6jlb\bin\Procmon.exe
C:\tmpxa6n6jlb\bin\procmon.pmc
C:\tmpxa6n6jlb\bin\psexec.exe
C:\tmpxa6n6jlb\bin\RGcTsqq.exe
C:\tmpsv59hb03\bin\ouqumVM.exe.basta
C:\tmpsv59hb03\bin\procmon.pmc.basta
C:\tmpsv59hb03\bin\psexec.exe.basta
C:\tmpsv59hb03\data\msix.ps1.basta
C:\tmpsv59hb03\dll\660.ini.basta
C:\tmpsv59hb03\bin\signtool.exe.basta
C:\tmph_w19omx\dll\QnAZYtX.dll.basta
C:\FDwSxoT\memory\8492.dmp.basta
C:\tmph_w19omx\bin\Procmon.exe.basta
C:\tmpsv59hb03\lib\__init__.py.basta
C:\tmpsv59hb03\modules\__init__.py.basta
C:\tmpsv59hb03\tests\test_analysis_packages.py.basta
C:\tmpxa6n6jlb\data\*
C:\tmpxa6n6jlb\data\msix.ps1
C:\tmpxa6n6jlb\data\yara
C:\tmpxa6n6jlb\data\yara\readme.txt
C:\tmpsv59hb03\tests\test_analyzer.py.basta
C:\tmpsv59hb03\tests\test_analyzer_files.py.basta
C:\tmpxa6n6jlb\dll\*
C:\tmpxa6n6jlb\dll\3512.ini
C:\tmpxa6n6jlb\dll\3936.ini
C:\tmpxa6n6jlb\dll\5156.ini
C:\tmpxa6n6jlb\dll\5360.ini
C:\tmpxa6n6jlb\dll\6488.ini
C:\tmpxa6n6jlb\dll\668.ini
C:\tmpxa6n6jlb\dll\capemon.dll
C:\tmpxa6n6jlb\dll\capemon_x64.dll
C:\tmpxa6n6jlb\dll\dZFlnqa.dll
C:\tmpxa6n6jlb\dll\HiyzVY.dll
C:\tmpsv59hb03\tests\test_analyzer_process_list.py.basta
C:\tmpsv59hb03\bin\geckodriver.exe.basta
C:\tmpugscyilj\bin\autoit3.exe.basta
C:\tmpugscyilj\bin\geckodriver.exe
C:\tmpugscyilj\bin\CcLHXMEM.exe.basta
C:\tmpugscyilj\bin\loader.exe.basta
C:\tmpugscyilj\bin\loader_x64.exe
C:\tmpugscyilj\bin\loader_x64.exe.basta
C:\tmpugscyilj\bin\pDCNQwo.exe.basta
C:\tmpugscyilj\bin\PPLinject.exe.basta
C:\tmpugscyilj\bin\PPLinject64.exe.basta
C:\tmpsv59hb03\dll\capemon.dll.basta
C:\tmpxa6n6jlb\lib\*
C:\tmpxa6n6jlb\lib\api
C:\tmpxa6n6jlb\lib\api\readme.txt
C:\tmpxa6n6jlb\lib\common
C:\tmpugscyilj\bin\procmon.pmc.basta
C:\tmpxa6n6jlb\lib\common\readme.txt
C:\tmpxa6n6jlb\lib\core
C:\tmpxa6n6jlb\lib\core\readme.txt
C:\tmpxa6n6jlb\lib\__init__.py
C:\tmpxa6n6jlb\lib\__pycache__
C:\tmpxa6n6jlb\lib\__pycache__\readme.txt
C:\tmpxa6n6jlb\modules\*
C:\tmpxa6n6jlb\modules\auxiliary
C:\tmpxa6n6jlb\modules\auxiliary\readme.txt
C:\tmpxa6n6jlb\modules\packages
C:\tmpxa6n6jlb\modules\packages\readme.txt
C:\tmpxa6n6jlb\modules\__init__.py
C:\tmpxa6n6jlb\modules\__pycache__
C:\tmpxa6n6jlb\modules\__pycache__\readme.txt
C:\tmpsv59hb03\dll\JvQumA.dll.basta
C:\tmpugscyilj\bin\signtool.exe
C:\tmpxa6n6jlb\tests\*
C:\tmpxa6n6jlb\tests\lib
C:\tmpxa6n6jlb\tests\lib\readme.txt
C:\tmpxa6n6jlb\tests\modules
C:\tmpxa6n6jlb\tests\modules\readme.txt
C:\tmpxa6n6jlb\tests\test_analysis_packages.py
C:\tmpxa6n6jlb\tests\test_analyzer.py
C:\tmpxa6n6jlb\tests\test_analyzer_files.py
C:\tmpxa6n6jlb\tests\test_analyzer_process_list.py
C:\tmpugscyilj\bin\signtool.exe.basta
C:\tmpugscyilj\data\msix.ps1.basta
C:\tmpugscyilj\dll\6156.ini.basta
C:\tmpugscyilj\dll\672.ini.basta
C:\tmpugscyilj\dll\8312.ini
C:\tmpugscyilj\dll\8312.ini.basta
C:\tmpyhyv52bd\bin\*
C:\tmpyhyv52bd\bin\bQqKdCRm.exe
C:\tmpyhyv52bd\bin\geckodriver.exe
C:\tmpyhyv52bd\bin\loader.exe
C:\tmpyhyv52bd\bin\loader_x64.exe
C:\tmpyhyv52bd\bin\PPLinject.exe
C:\tmpyhyv52bd\bin\PPLinject64.exe
C:\tmpyhyv52bd\bin\Procmon.exe
C:\tmpyhyv52bd\bin\procmon.pmc
C:\tmpyhyv52bd\bin\psexec.exe
C:\tmpyhyv52bd\bin\rZsBKAg.exe
C:\tmpyhyv52bd\bin\signtool.exe
C:\tmpugscyilj\bin\psexec.exe.basta
C:\tmpsv59hb03\dll\capemon_x64.dll.basta
C:\tmpsv59hb03\dll\LVCETPK.dll.basta
C:\tmpsv59hb03\bin\Procmon.exe.basta
C:\tmpugscyilj\lib\__init__.py.basta
C:\tmpugscyilj\modules\__init__.py.basta
C:\tmpugscyilj\tests\test_analysis_packages.py.basta
C:\tmpugscyilj\tests\test_analyzer.py.basta
C:\tmpugscyilj\tests\test_analyzer_files.py.basta
C:\tmpugscyilj\tests\test_analyzer_process_list.py.basta
C:\tmpugscyilj\bin\geckodriver.exe.basta
C:\tmpxa6n6jlb\bin\geckodriver.exe
C:\tmpyhyv52bd\data\*
C:\tmpyhyv52bd\data\msix.ps1
C:\tmpyhyv52bd\data\yara
C:\tmpyhyv52bd\data\yara\readme.txt
C:\tmpxa6n6jlb\bin\autoit3.exe.basta
C:\tmpyhyv52bd\dll\*
C:\tmpyhyv52bd\dll\1528.ini
C:\tmpyhyv52bd\dll\3252.ini
C:\tmpyhyv52bd\dll\4024.ini
C:\tmpyhyv52bd\dll\604.ini
C:\tmpyhyv52bd\dll\612.ini
C:\tmpyhyv52bd\dll\6176.ini
C:\tmpyhyv52bd\dll\6500.ini
C:\tmpyhyv52bd\dll\7020.ini
C:\tmpyhyv52bd\dll\7164.ini
C:\tmpyhyv52bd\dll\724.ini
C:\tmpyhyv52bd\dll\7348.ini
C:\tmpyhyv52bd\dll\7380.ini
C:\tmpyhyv52bd\dll\7508.ini
C:\tmpyhyv52bd\dll\alQTNhGC.dll
C:\tmpyhyv52bd\dll\capemon.dll
C:\tmpyhyv52bd\dll\capemon_x64.dll
C:\tmpyhyv52bd\dll\PrQuPli.dll
C:\tmpxa6n6jlb\bin\loader.exe.basta
C:\tmpxa6n6jlb\bin\loader_x64.exe.basta
C:\tmpugscyilj\dll\capemon.dll.basta
C:\tmpxa6n6jlb\bin\PPLinject64.exe
C:\tmpxa6n6jlb\bin\PPLinject.exe.basta
C:\tmpxa6n6jlb\bin\PPLinject64.exe.basta
C:\tmpxa6n6jlb\bin\procmon.pmc.basta
C:\tmpxa6n6jlb\bin\psexec.exe.basta
C:\tmpugscyilj\dll\lvnmWnN.dll.basta
C:\tmpxa6n6jlb\bin\signtool.exe
C:\tmpxa6n6jlb\bin\RGcTsqq.exe.basta
C:\tmpxa6n6jlb\bin\tEubcIZA.exe
C:\tmpxa6n6jlb\bin\signtool.exe.basta
C:\tmpxa6n6jlb\data\msix.ps1.basta
C:\tmpxa6n6jlb\dll\3512.ini.basta
C:\tmpxa6n6jlb\dll\3936.ini.basta
C:\tmpxa6n6jlb\dll\5156.ini.basta
C:\tmpxa6n6jlb\dll\5360.ini.basta
C:\tmpxa6n6jlb\dll\6488.ini.basta
C:\tmpxa6n6jlb\dll\668.ini.basta
C:\tmpxa6n6jlb\dll\780.ini
C:\tmpyhyv52bd\lib\*
C:\tmpyhyv52bd\lib\api
C:\tmpxa6n6jlb\dll\780.ini.basta
C:\tmpyhyv52bd\lib\api\readme.txt
C:\tmpyhyv52bd\lib\common
C:\tmpyhyv52bd\lib\common\readme.txt
C:\tmpyhyv52bd\lib\core
C:\tmpyhyv52bd\lib\core\readme.txt
C:\tmpyhyv52bd\lib\__init__.py
C:\tmpyhyv52bd\lib\__pycache__
C:\tmpyhyv52bd\lib\__pycache__\readme.txt
C:\tmpyhyv52bd\modules\*
C:\tmpyhyv52bd\modules\auxiliary
C:\tmpyhyv52bd\modules\auxiliary\readme.txt
C:\tmpyhyv52bd\modules\packages\readme.txt
C:\tmpyhyv52bd\modules\__init__.py
C:\tmpyhyv52bd\modules\__pycache__
C:\tmpyhyv52bd\modules\__pycache__\readme.txt
C:\tmpxa6n6jlb\bin\tEubcIZA.exe.basta
C:\tmpyhyv52bd\tests
C:\tmpyhyv52bd\tests\*
C:\tmpyhyv52bd\tests\lib
C:\tmpyhyv52bd\tests\lib\readme.txt
C:\tmpyhyv52bd\tests\modules
C:\tmpyhyv52bd\tests\modules\readme.txt
C:\tmpyhyv52bd\tests\test_analysis_packages.py
C:\tmpyhyv52bd\tests\test_analyzer.py
C:\tmpyhyv52bd\tests\test_analyzer_files.py
C:\tmpyhyv52bd\tests\test_analyzer_process_list.py
C:\tmpugscyilj\dll\capemon_x64.dll.basta
C:\tmpugscyilj\dll\cweSNMQP.dll.basta
C:\tmpugscyilj\bin\Procmon.exe.basta
C:\tmpxa6n6jlb\lib\__init__.py.basta
C:\tmpxa6n6jlb\modules\__init__.py.basta
C:\tmp_4c73x2e\bin
C:\tmp_4c73x2e\bin\*
C:\tmp_4c73x2e\bin\autoit3.exe
C:\tmp_4c73x2e\bin\FKHbweEn.exe
C:\tmp_4c73x2e\bin\geckodriver.exe
C:\tmp_4c73x2e\bin\loader.exe
C:\tmp_4c73x2e\bin\loader_x64.exe
C:\tmp_4c73x2e\bin\Procmon.exe
C:\tmp_4c73x2e\bin\procmon.pmc
C:\tmp_4c73x2e\bin\psexec.exe
C:\tmp_4c73x2e\bin\signtool.exe
C:\tmp_4c73x2e\bin\wCjxibK.exe
C:\tmpxa6n6jlb\tests\test_analysis_packages.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer_files.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer_process_list.py.basta
C:\tmpyhyv52bd\bin\autoit3.exe
C:\tmpxa6n6jlb\bin\geckodriver.exe.basta
C:\tmpyhyv52bd\bin\bQqKdCRm.exe.basta
C:\tmpxa6n6jlb\dll\capemon.dll.basta
C:\tmpyhyv52bd\bin\autoit3.exe.basta
C:\tmpyhyv52bd\bin\loader.exe.basta
C:\tmpyhyv52bd\bin\loader_x64.exe.basta
C:\tmpyhyv52bd\bin\PPLinject64.exe.basta
C:\tmpyhyv52bd\bin\procmon.pmc.basta
C:\tmpxa6n6jlb\dll\HiyzVY.dll.basta
C:\tmpyhyv52bd\bin\rZsBKAg.exe.basta
C:\tmp_4c73x2e\lib\*
C:\tmp_4c73x2e\lib\api
C:\tmp_4c73x2e\lib\api\readme.txt
C:\tmp_4c73x2e\lib\common
C:\tmp_4c73x2e\lib\common\readme.txt
C:\tmp_4c73x2e\lib\core
C:\tmp_4c73x2e\lib\core\readme.txt
C:\tmp_4c73x2e\lib\__init__.py
C:\tmp_4c73x2e\lib\__pycache__
C:\tmp_4c73x2e\lib\__pycache__\readme.txt
C:\tmpyhyv52bd\bin\psexec.exe.basta
C:\tmpyhyv52bd\data\msix.ps1.basta
C:\tmpyhyv52bd\dll\1528.ini.basta
C:\tmp_4c73x2e\modules\*
C:\tmp_4c73x2e\modules\auxiliary
C:\tmp_4c73x2e\modules\auxiliary\readme.txt
C:\tmpyhyv52bd\dll\3252.ini.basta
C:\tmp_4c73x2e\modules\packages
C:\tmp_4c73x2e\modules\__init__.py
C:\tmp_4c73x2e\modules\__pycache__
C:\tmp_4c73x2e\tests\*
C:\tmp_4c73x2e\tests\lib
C:\tmp_4c73x2e\tests\lib\readme.txt
C:\tmp_4c73x2e\tests\modules
C:\tmp_4c73x2e\tests\modules\readme.txt
C:\tmp_4c73x2e\tests\test_analysis_packages.py
C:\tmp_4c73x2e\tests\test_analyzer.py
C:\tmp_4c73x2e\tests\test_analyzer_files.py
C:\tmp_4c73x2e\tests\test_analyzer_process_list.py
C:\tmpyhyv52bd\dll\4024.ini.basta
C:\tmpyhyv52bd\dll\604.ini.basta
C:\tmpyhyv52bd\dll\612.ini.basta
C:\Users\All Users\*
C:\Users\All Users\Datos de programa
C:\Users\All Users\Datos de programa\readme.txt
C:\Users\All Users\Documentos
C:\Users\All Users\Documentos\readme.txt
C:\Users\All Users\Escritorio
C:\tmpyhyv52bd\dll\6500.ini.basta
C:\Users\All Users\Escritorio\readme.txt
C:\tmpyhyv52bd\dll\7020.ini.basta
C:\tmpyhyv52bd\dll\7164.ini.basta
C:\tmpyhyv52bd\dll\724.ini.basta
C:\tmpyhyv52bd\dll\7348.ini.basta
C:\tmpyhyv52bd\dll\7380.ini.basta
C:\tmpyhyv52bd\dll\7508.ini.basta
C:\Users\All Users\Men\xfa Inicio
C:\Users\All Users\Men\xfa Inicio\readme.txt
C:\tmpyhyv52bd\bin\signtool.exe.basta
C:\tmpxa6n6jlb\dll\capemon_x64.dll.basta
C:\Users\All Users\Microsoft
C:\Users\All Users\Microsoft\readme.txt
C:\Users\All Users\Microsoft OneDrive
C:\Users\All Users\Microsoft OneDrive\readme.txt
C:\Users\All Users\Package Cache
C:\Users\All Users\Package Cache\readme.txt
C:\Users\All Users\Packages\readme.txt
C:\Users\All Users\Plantillas
C:\Users\All Users\Plantillas\readme.txt
C:\Users\All Users\regid.1991-06.com.microsoft
C:\Users\All Users\regid.1991-06.com.microsoft\readme.txt
C:\Users\All Users\SoftwareDistribution
C:\Users\All Users\SoftwareDistribution\readme.txt
C:\Users\All Users\ssh\readme.txt
C:\Users\All Users\USOPrivate
C:\Users\All Users\USOPrivate\readme.txt
C:\Users\All Users\USOShared\readme.txt
C:\Users\Default\*
C:\Users\Default\AppData
C:\Users\Default\AppData\readme.txt
C:\Users\Default\Configuraci\xf3n local
C:\Users\Default\Configuraci\xf3n local\readme.txt
C:\Users\Default\Cookies
C:\Users\Default\Cookies\readme.txt
C:\Users\Default\Datos de programa
C:\Users\Default\Datos de programa\readme.txt
C:\Users\Default\Desktop
C:\Users\Default\Desktop\readme.txt
C:\Users\Default\Documents
C:\Users\Default\Documents\readme.txt
C:\Users\Default\Downloads
C:\Users\Default\Downloads\readme.txt
C:\Users\Default\Entorno de red
C:\Users\Default\Entorno de red\readme.txt
C:\Users\Default\Favorites
C:\Users\Default\Favorites\readme.txt
C:\Users\Default\Impresoras
C:\Users\Default\Impresoras\readme.txt
C:\Users\Default\Links
C:\Users\Default\Links\readme.txt
C:\Users\Default\Men\xfa Inicio
C:\Users\Default\Men\xfa Inicio\readme.txt
C:\Users\Default\Mis documentos
C:\Users\Default\Mis documentos\readme.txt
C:\Users\Default\Music
C:\Users\Default\Music\readme.txt
C:\Users\Default\Pictures
C:\Users\Default\Pictures\readme.txt
C:\Users\Default\Plantillas
C:\Users\Default\Plantillas\readme.txt
C:\Users\Default\Reciente
C:\Users\Default\Reciente\readme.txt
C:\Users\Default\Saved Games
C:\Users\Default\Saved Games\readme.txt
C:\Users\Default\SendTo
C:\Users\Default\SendTo\readme.txt
C:\Users\Default\Videos
C:\Users\Default\Videos\readme.txt
C:\Users\Default User\*
C:\Users\Default User\AppData
C:\Users\Default User\AppData\readme.txt
C:\Users\Default User\Configuraci\xf3n local
C:\tmpxa6n6jlb\dll\dZFlnqa.dll.basta
C:\Users\Default User\Configuraci\xf3n local\readme.txt
C:\Users\Default User\Cookies
C:\Users\Default User\Cookies\readme.txt
C:\Users\Default User\Datos de programa
C:\Users\Default User\Datos de programa\readme.txt
C:\Users\Default User\Desktop
C:\Users\Default User\Desktop\readme.txt
C:\Users\Default User\Documents
C:\Users\Default User\Documents\readme.txt
C:\Users\Default User\Downloads
C:\Users\Default User\Downloads\readme.txt
C:\Users\Default User\Entorno de red
C:\Users\Default User\Entorno de red\readme.txt
C:\Users\Default User\Favorites
C:\Users\Default User\Favorites\readme.txt
C:\Users\Default User\Impresoras
C:\Users\Default User\Impresoras\readme.txt
C:\Users\Default User\Links
C:\Users\Default User\Links\readme.txt
C:\Users\Default User\Men\xfa Inicio
C:\Users\Default User\Men\xfa Inicio\readme.txt
C:\Users\Default User\Mis documentos
C:\Users\Default User\Mis documentos\readme.txt
C:\Users\Default User\Music
C:\Users\Default User\Music\readme.txt
C:\Users\Default User\Pictures
C:\Users\Default User\Pictures\readme.txt
C:\Users\Default User\Plantillas
C:\Users\Default User\Plantillas\readme.txt
C:\Users\Default User\Reciente
C:\Users\Default User\Reciente\readme.txt
C:\Users\Default User\Saved Games
C:\Users\Default User\Saved Games\readme.txt
C:\Users\Default User\SendTo
C:\Users\Default User\SendTo\readme.txt
C:\Users\Default User\Videos
C:\Users\Default User\Videos\readme.txt
C:\Users\pacop\*
C:\Users\pacop\3D Objects
C:\Users\pacop\3D Objects\readme.txt
C:\Users\pacop\AppData
C:\Users\pacop\AppData\readme.txt
C:\Users\pacop\Configuraci\xf3n local
C:\Users\pacop\Configuraci\xf3n local\readme.txt
C:\Users\pacop\Contacts
C:\Users\pacop\Contacts\readme.txt
C:\Users\pacop\Cookies
C:\Users\pacop\Cookies\readme.txt
C:\Users\pacop\Datos de programa
C:\Users\pacop\Datos de programa\readme.txt
C:\Users\pacop\Desktop
C:\Users\pacop\Desktop\readme.txt
C:\Users\pacop\Documents
C:\Users\pacop\Documents\readme.txt
C:\Users\pacop\Downloads
C:\Users\pacop\Downloads\readme.txt
C:\Users\pacop\Entorno de red
C:\Users\pacop\Entorno de red\readme.txt
C:\Users\pacop\Favorites
C:\Users\pacop\Favorites\readme.txt
C:\Users\pacop\Impresoras
C:\Users\pacop\Impresoras\readme.txt
C:\Users\pacop\Links
C:\Users\pacop\Links\readme.txt
C:\Users\pacop\Men\xfa Inicio
C:\Users\pacop\Men\xfa Inicio\readme.txt
C:\Users\pacop\Mis documentos
C:\Users\pacop\Mis documentos\readme.txt
C:\Users\pacop\Music
C:\Users\pacop\Music\readme.txt
C:\Users\pacop\ntuser.dat.LOG1
C:\Users\pacop\ntuser.dat.LOG2
C:\Users\pacop\ntuser.ini
C:\Users\pacop\OneDrive
C:\Users\pacop\OneDrive\readme.txt
C:\Users\pacop\Pictures
C:\Users\pacop\Pictures\readme.txt
C:\Users\pacop\Plantillas
C:\Users\pacop\Plantillas\readme.txt
C:\Users\pacop\Reciente
C:\Users\pacop\Reciente\readme.txt
C:\Users\pacop\Saved Games
C:\Users\pacop\Saved Games\readme.txt
C:\Users\pacop\Searches
C:\Users\pacop\Searches\readme.txt
C:\Users\pacop\SendTo
C:\Users\pacop\SendTo\readme.txt
C:\Users\pacop\Videos
C:\Users\pacop\Videos\readme.txt
C:\Users\Public\*
C:\Users\Public\AccountPictures
C:\Users\Public\AccountPictures\readme.txt
C:\Users\Public\Desktop
C:\Users\Public\Desktop\readme.txt
C:\Users\Public\desktop.ini
C:\Users\Public\Documents
C:\Users\Public\Documents\readme.txt
C:\Users\Public\Downloads
C:\Users\Public\Downloads\readme.txt
C:\Users\Public\Libraries
C:\Users\Public\Libraries\readme.txt
C:\Users\Public\Music
C:\Users\Public\Music\readme.txt
C:\Users\Public\Pictures
C:\Users\Public\Pictures\readme.txt
C:\Users\Public\Videos
C:\Users\Public\Videos\readme.txt
C:\VhGXHyPr\CAPE\*
C:\VhGXHyPr\CAPE\7652_14527944554381172024
C:\VhGXHyPr\CAPE\7652_152352750491172024
C:\VhGXHyPr\CAPE\7652_1803158564381172024
C:\VhGXHyPr\CAPE\7652_42672564381172024
C:\VhGXHyPr\drop\*
C:\VhGXHyPr\files\*
C:\VhGXHyPr\logs\*
C:\VhGXHyPr\memory\*
C:\VhGXHyPr\shots\*
C:\VhGXHyPr\tlsdump\*
C:\VhGXHyPr\tlsdump\tlsdump.log
C:\VJCYHvoxA\debugger\*
C:\VJCYHvoxA\debugger\5436.log
C:\VJCYHvoxA\drop\*
C:\VJCYHvoxA\files\*
C:\VJCYHvoxA\logs\*
C:\VJCYHvoxA\memory\*
C:\VJCYHvoxA\shots\*
C:\VJCYHvoxA\tlsdump\*
C:\VJCYHvoxA\tlsdump\tlsdump.log
C:\wJvzAqbRj\drop\*
C:\wJvzAqbRj\files\*
C:\wJvzAqbRj\logs\*
C:\wJvzAqbRj\memory\*
C:\wJvzAqbRj\shots\*
C:\wJvzAqbRj\tlsdump\*
C:\wJvzAqbRj\tlsdump\tlsdump.log
C:\YtGTvE\CAPE\*
C:\YtGTvE\CAPE\7728_174742063756428562024
C:\YtGTvE\CAPE\7728_184736053161228562024
C:\YtGTvE\CAPE\7728_223072853656428562024
C:\YtGTvE\CAPE\7728_23050856161228562024
C:\YtGTvE\CAPE\7728_255021073656428562024
C:\YtGTvE\CAPE\7728_48569953656428562024
C:\YtGTvE\CAPE\7728_565394456161228562024
C:\tmpxa6n6jlb\bin\Procmon.exe.basta
C:\tmpyhyv52bd\lib\__init__.py.basta
C:\tmpyhyv52bd\modules\__init__.py.basta
C:\tmpyhyv52bd\tests\test_analysis_packages.py.basta
C:\tmpyhyv52bd\tests\test_analyzer.py.basta
C:\tmpyhyv52bd\tests\test_analyzer_files.py.basta
C:\tmpyhyv52bd\tests\test_analyzer_process_list.py.basta
C:\YtGTvE\drop\*
C:\YtGTvE\files
C:\YtGTvE\files\*
C:\YtGTvE\logs
C:\YtGTvE\logs\*
C:\YtGTvE\memory
C:\YtGTvE\memory\*
C:\YtGTvE\shots
C:\YtGTvE\shots\*
C:\YtGTvE\tlsdump
C:\YtGTvE\tlsdump\*
C:\YtGTvE\tlsdump\tlsdump.log
C:\tmpyhyv52bd\bin\geckodriver.exe.basta
C:\tmpyhyv52bd\dll\capemon.dll.basta
C:\tmp_4c73x2e\bin\autoit3.exe.basta
C:\zKlZnVrs\CAPE
C:\zKlZnVrs\CAPE\*
C:\zKlZnVrs\CAPE\4908_2531685057591411472024
C:\zKlZnVrs\drop
C:\zKlZnVrs\drop\*
C:\tmp_4c73x2e\bin\FKHbweEn.exe.basta
C:\zKlZnVrs\files
C:\zKlZnVrs\files\*
C:\zKlZnVrs\logs
C:\zKlZnVrs\logs\*
C:\zKlZnVrs\memory\*
C:\zKlZnVrs\shots\*
C:\zKlZnVrs\tlsdump\*
C:\zKlZnVrs\tlsdump\tlsdump.log
C:\Archivos de programa\7-Zip\Lang\*
C:\Archivos de programa\7-Zip\Lang\af.txt
C:\Archivos de programa\7-Zip\Lang\an.txt
C:\Archivos de programa\7-Zip\Lang\ar.txt
C:\Archivos de programa\7-Zip\Lang\ast.txt
C:\Archivos de programa\7-Zip\Lang\az.txt
C:\Archivos de programa\7-Zip\Lang\ba.txt
C:\Archivos de programa\7-Zip\Lang\be.txt
C:\Archivos de programa\7-Zip\Lang\bg.txt
C:\Archivos de programa\7-Zip\Lang\bn.txt
C:\Archivos de programa\7-Zip\Lang\br.txt
C:\Archivos de programa\7-Zip\Lang\ca.txt
C:\Archivos de programa\7-Zip\Lang\co.txt
C:\Archivos de programa\7-Zip\Lang\cs.txt
C:\Archivos de programa\7-Zip\Lang\cy.txt
C:\Archivos de programa\7-Zip\Lang\da.txt
C:\Archivos de programa\7-Zip\Lang\de.txt
C:\Archivos de programa\7-Zip\Lang\el.txt
C:\Archivos de programa\7-Zip\Lang\en.ttt
C:\Archivos de programa\7-Zip\Lang\eo.txt
C:\Archivos de programa\7-Zip\Lang\es.txt
C:\Archivos de programa\7-Zip\Lang\et.txt
C:\Archivos de programa\7-Zip\Lang\eu.txt
C:\Archivos de programa\7-Zip\Lang\ext.txt
C:\Archivos de programa\7-Zip\Lang\fa.txt
C:\Archivos de programa\7-Zip\Lang\fi.txt
C:\Archivos de programa\7-Zip\Lang\fr.txt
C:\Archivos de programa\7-Zip\Lang\fur.txt
C:\Archivos de programa\7-Zip\Lang\fy.txt
C:\Archivos de programa\7-Zip\Lang\ga.txt
C:\Archivos de programa\7-Zip\Lang\gl.txt
C:\Archivos de programa\7-Zip\Lang\gu.txt
C:\Archivos de programa\7-Zip\Lang\he.txt
C:\Archivos de programa\7-Zip\Lang\hi.txt
C:\Archivos de programa\7-Zip\Lang\hr.txt
C:\Archivos de programa\7-Zip\Lang\hu.txt
C:\Archivos de programa\7-Zip\Lang\hy.txt
C:\Archivos de programa\7-Zip\Lang\io.txt
C:\Archivos de programa\7-Zip\Lang\is.txt
C:\Archivos de programa\7-Zip\Lang\it.txt
C:\Archivos de programa\7-Zip\Lang\ka.txt
C:\Archivos de programa\7-Zip\Lang\kaa.txt
C:\Archivos de programa\7-Zip\Lang\kab.txt
C:\Archivos de programa\7-Zip\Lang\kk.txt
C:\Archivos de programa\7-Zip\Lang\ko.txt
C:\Archivos de programa\7-Zip\Lang\ku-ckb.txt
C:\Archivos de programa\7-Zip\Lang\ku.txt
C:\Archivos de programa\7-Zip\Lang\ky.txt
C:\Archivos de programa\7-Zip\Lang\lij.txt
C:\Archivos de programa\7-Zip\Lang\lt.txt
C:\Archivos de programa\7-Zip\Lang\lv.txt
C:\Archivos de programa\7-Zip\Lang\mk.txt
C:\Archivos de programa\7-Zip\Lang\mn.txt
C:\Archivos de programa\7-Zip\Lang\mng.txt
C:\Archivos de programa\7-Zip\Lang\mng2.txt
C:\Archivos de programa\7-Zip\Lang\mr.txt
C:\Archivos de programa\7-Zip\Lang\ms.txt
C:\Archivos de programa\7-Zip\Lang\ne.txt
C:\Archivos de programa\7-Zip\Lang\nl.txt
C:\Archivos de programa\7-Zip\Lang\nn.txt
C:\Archivos de programa\7-Zip\Lang\pa-in.txt
C:\Archivos de programa\7-Zip\Lang\pl.txt
C:\Archivos de programa\7-Zip\Lang\ps.txt
C:\Archivos de programa\7-Zip\Lang\pt-br.txt
C:\Archivos de programa\7-Zip\Lang\pt.txt
C:\Archivos de programa\7-Zip\Lang\ro.txt
C:\Archivos de programa\7-Zip\Lang\ru.txt
C:\Archivos de programa\7-Zip\Lang\sa.txt
C:\Archivos de programa\7-Zip\Lang\si.txt
C:\Archivos de programa\7-Zip\Lang\sk.txt
C:\Archivos de programa\7-Zip\Lang\sl.txt
C:\Archivos de programa\7-Zip\Lang\sq.txt
C:\Archivos de programa\7-Zip\Lang\sr-spc.txt
C:\Archivos de programa\7-Zip\Lang\sr-spl.txt
C:\Archivos de programa\7-Zip\Lang\sv.txt
C:\Archivos de programa\7-Zip\Lang\sw.txt
C:\Archivos de programa\7-Zip\Lang\ta.txt
C:\Archivos de programa\7-Zip\Lang\tg.txt
C:\Archivos de programa\7-Zip\Lang\th.txt
C:\Archivos de programa\7-Zip\Lang\tk.txt
C:\Archivos de programa\7-Zip\Lang\tr.txt
C:\Archivos de programa\7-Zip\Lang\tt.txt
C:\Archivos de programa\7-Zip\Lang\ug.txt
C:\Archivos de programa\7-Zip\Lang\uk.txt
C:\Archivos de programa\7-Zip\Lang\uz-cyrl.txt
C:\Archivos de programa\7-Zip\Lang\uz.txt
C:\Archivos de programa\7-Zip\Lang\va.txt
C:\Archivos de programa\7-Zip\Lang\vi.txt
C:\Archivos de programa\7-Zip\Lang\yo.txt
C:\Archivos de programa\7-Zip\Lang\zh-cn.txt
C:\Archivos de programa\7-Zip\Lang\zh-tw.txt
C:\tmp_4c73x2e\bin\loader_x64.exe.basta
C:\tmp_4c73x2e\bin\loader.exe.basta
C:\tmp_4c73x2e\bin\procmon.pmc.basta
C:\tmp_4c73x2e\bin\psexec.exe.basta
C:\tmp_4c73x2e\bin\signtool.exe.basta
C:\tmpyhyv52bd\dll\PrQuPli.dll.basta
C:\tmp_4c73x2e\data\msix.ps1
C:\tmp_4c73x2e\data\msix.ps1.basta
C:\tmp_4c73x2e\dll\660.ini
C:\tmp_4c73x2e\dll\660.ini.basta
C:\tmp_4c73x2e\dll\capemon.dll
C:\tmp_4c73x2e\bin\wCjxibK.exe.basta
C:\tmp_4c73x2e\dll\capemon_x64.dll
C:\tmpyhyv52bd\dll\alQTNhGC.dll.basta
C:\tmp_4c73x2e\dll\dnTvdPdP.dll
C:\tmpyhyv52bd\dll\capemon_x64.dll.basta
C:\tmp_4c73x2e\dll\dnypqaYT.dll
C:\tmpyhyv52bd\bin\Procmon.exe.basta
C:\tmp_4c73x2e\lib\__init__.py.basta
C:\tmp_4c73x2e\modules\__init__.py.basta
C:\tmp_4c73x2e\tests\test_analysis_packages.py.basta
C:\tmp_4c73x2e\tests\test_analyzer.py.basta
C:\tmp_4c73x2e\tests\test_analyzer_files.py.basta
C:\tmp_4c73x2e\tests\test_analyzer_process_list.py.basta
C:\VhGXHyPr\CAPE\7652_14527944554381172024.basta
C:\VhGXHyPr\CAPE\7652_152352750491172024.basta
C:\VhGXHyPr\CAPE\7652_1803158564381172024.basta
C:\VhGXHyPr\CAPE\7652_42672564381172024.basta
C:\VhGXHyPr\tlsdump\tlsdump.log.basta
C:\VJCYHvoxA\debugger\5436.log.basta
C:\VJCYHvoxA\tlsdump\tlsdump.log.basta
C:\wJvzAqbRj\tlsdump\tlsdump.log.basta
C:\YtGTvE\CAPE\7728_174742063756428562024.basta
C:\YtGTvE\CAPE\7728_184736053161228562024.basta
C:\YtGTvE\CAPE\7728_223072853656428562024.basta
C:\YtGTvE\CAPE\7728_23050856161228562024.basta
C:\YtGTvE\CAPE\7728_255021073656428562024.basta
C:\YtGTvE\CAPE\7728_48569953656428562024.basta
C:\YtGTvE\CAPE\7728_565394456161228562024.basta
C:\YtGTvE\tlsdump\tlsdump.log.basta
C:\zKlZnVrs\CAPE\4908_2531685057591411472024.basta
C:\zKlZnVrs\tlsdump\tlsdump.log.basta
C:\Archivos de programa\7-Zip\Lang\af.txt.basta
C:\Archivos de programa\7-Zip\Lang\an.txt.basta
C:\Archivos de programa\7-Zip\Lang\ar.txt.basta
C:\Archivos de programa\7-Zip\Lang\ast.txt.basta
C:\Archivos de programa\7-Zip\Lang\az.txt.basta
C:\Archivos de programa\7-Zip\Lang\ba.txt.basta
C:\Archivos de programa\7-Zip\Lang\be.txt.basta
C:\Archivos de programa\7-Zip\Lang\bg.txt.basta
C:\Archivos de programa\7-Zip\Lang\bn.txt.basta
C:\Archivos de programa\7-Zip\Lang\br.txt.basta
C:\Archivos de programa\7-Zip\Lang\ca.txt.basta
C:\Archivos de programa\7-Zip\Lang\co.txt.basta
C:\Archivos de programa\7-Zip\Lang\cs.txt.basta
C:\Archivos de programa\7-Zip\Lang\cy.txt.basta
C:\Archivos de programa\7-Zip\Lang\da.txt.basta
C:\Archivos de programa\7-Zip\Lang\de.txt.basta
C:\Archivos de programa\7-Zip\Lang\el.txt.basta
C:\Archivos de programa\7-Zip\Lang\en.ttt.basta
C:\Archivos de programa\7-Zip\Lang\eo.txt.basta
C:\Archivos de programa\7-Zip\Lang\es.txt.basta
C:\Archivos de programa\7-Zip\Lang\et.txt.basta
C:\Archivos de programa\7-Zip\Lang\eu.txt.basta
C:\Archivos de programa\7-Zip\Lang\ext.txt.basta
C:\Archivos de programa\7-Zip\Lang\fa.txt.basta
C:\Archivos de programa\7-Zip\Lang\fi.txt.basta
C:\Archivos de programa\7-Zip\Lang\fr.txt.basta
C:\Archivos de programa\7-Zip\Lang\fur.txt.basta
C:\Archivos de programa\7-Zip\Lang\fy.txt.basta
C:\Archivos de programa\7-Zip\Lang\ga.txt.basta
C:\Archivos de programa\7-Zip\Lang\gl.txt.basta
C:\Archivos de programa\7-Zip\Lang\gu.txt.basta
C:\Archivos de programa\7-Zip\Lang\he.txt.basta
C:\Archivos de programa\7-Zip\Lang\hi.txt.basta
C:\Archivos de programa\7-Zip\Lang\hr.txt.basta
C:\Archivos de programa\7-Zip\Lang\hu.txt.basta
C:\Archivos de programa\7-Zip\Lang\hy.txt.basta
C:\Archivos de programa\7-Zip\Lang\id.txt
C:\Archivos de programa\7-Zip\Lang\id.txt.basta
C:\Archivos de programa\7-Zip\Lang\io.txt.basta
C:\Archivos de programa\7-Zip\Lang\is.txt.basta
C:\Archivos de programa\7-Zip\Lang\it.txt.basta
C:\Archivos de programa\7-Zip\Lang\ja.txt
C:\tmp_4c73x2e\bin\geckodriver.exe.basta
C:\Archivos de programa\7-Zip\Lang\ja.txt.basta
C:\Archivos de programa\7-Zip\Lang\kaa.txt.basta
C:\Archivos de programa\7-Zip\Lang\kab.txt.basta
C:\Archivos de programa\7-Zip\Lang\kk.txt.basta
C:\Archivos de programa\7-Zip\Lang\ko.txt.basta
C:\Archivos de programa\7-Zip\Lang\ku-ckb.txt.basta
C:\Archivos de programa\7-Zip\Lang\ku.txt.basta
C:\Archivos de programa\7-Zip\Lang\ky.txt.basta
C:\Archivos de programa\7-Zip\Lang\ka.txt.basta
C:\Archivos de programa\7-Zip\Lang\lij.txt.basta
C:\Archivos de programa\7-Zip\Lang\lt.txt.basta
C:\Archivos de programa\7-Zip\Lang\lv.txt.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\Stationery
C:\Archivos de programa\Archivos comunes\microsoft shared\Stationery\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\TextConv
C:\Archivos de programa\Archivos comunes\microsoft shared\TextConv\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\Triedit
C:\Archivos de programa\Archivos comunes\microsoft shared\Triedit\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\VGX
C:\Archivos de programa\Archivos comunes\microsoft shared\VGX\readme.txt
C:\Archivos de programa\Archivos comunes\Services\*
C:\Archivos de programa\Archivos comunes\Services\verisign.bmp
C:\Archivos de programa\Archivos comunes\System\*
C:\Archivos de programa\Archivos comunes\System\ado
C:\Archivos de programa\Archivos comunes\System\ado\readme.txt
C:\Archivos de programa\Archivos comunes\System\en-US
C:\Archivos de programa\Archivos comunes\System\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\System\es-ES
C:\Archivos de programa\Archivos comunes\System\es-ES\readme.txt
C:\Archivos de programa\Archivos comunes\System\msadc
C:\Archivos de programa\Archivos comunes\System\msadc\readme.txt
C:\Archivos de programa\Archivos comunes\System\Ole DB
C:\Archivos de programa\Archivos comunes\System\Ole DB\readme.txt
C:\Archivos de programa\Archivos comunes\System\wab32.dll
C:\Archivos de programa\Archivos comunes\System\wab32res.dll
C:\Archivos de programa\7-Zip\Lang\mn.txt.basta
C:\Archivos de programa\7-Zip\Lang\mk.txt.basta
C:\Archivos de programa\Common Files\microsoft shared\*
C:\Archivos de programa\Common Files\microsoft shared\ink
C:\Archivos de programa\Common Files\microsoft shared\ink\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\MSInfo
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\Stationery
C:\Archivos de programa\Common Files\microsoft shared\Stationery\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\TextConv
C:\Archivos de programa\Common Files\microsoft shared\TextConv\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\Triedit
C:\Archivos de programa\Common Files\microsoft shared\Triedit\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\VGX
C:\Archivos de programa\Common Files\microsoft shared\VGX\readme.txt
C:\Archivos de programa\Common Files\Services\*
C:\Archivos de programa\Common Files\Services\verisign.bmp
C:\Archivos de programa\7-Zip\Lang\mng.txt.basta
C:\Archivos de programa\7-Zip\Lang\mng2.txt.basta
C:\Archivos de programa\Common Files\System\*
C:\Archivos de programa\Common Files\System\ado
C:\Archivos de programa\Common Files\System\en-US\readme.txt
C:\Archivos de programa\7-Zip\Lang\mr.txt.basta
C:\Archivos de programa\Common Files\System\es-ES
C:\Archivos de programa\Common Files\System\es-ES\readme.txt
C:\Archivos de programa\Common Files\System\msadc
C:\Archivos de programa\Common Files\System\msadc\readme.txt
C:\Archivos de programa\Common Files\System\Ole DB
C:\Archivos de programa\Common Files\System\wab32.dll
C:\Archivos de programa\Common Files\System\wab32res.dll
C:\Archivos de programa\7-Zip\Lang\nb.txt
C:\Archivos de programa\7-Zip\Lang\ms.txt.basta
C:\Archivos de programa\7-Zip\Lang\nb.txt.basta
C:\Archivos de programa\7-Zip\Lang\ne.txt.basta
C:\Archivos de programa\7-Zip\Lang\pl.txt.basta
C:\Archivos de programa\7-Zip\Lang\ps.txt.basta
C:\Archivos de programa\7-Zip\Lang\pt-br.txt.basta
C:\Archivos de programa\7-Zip\Lang\pt.txt.basta
C:\Archivos de programa\7-Zip\Lang\ru.txt.basta
C:\Archivos de programa\7-Zip\Lang\sa.txt.basta
C:\Archivos de programa\7-Zip\Lang\sk.txt.basta
C:\Archivos de programa\7-Zip\Lang\sr-spl.txt.basta
C:\Archivos de programa\7-Zip\Lang\ta.txt.basta
C:\Archivos de programa\7-Zip\Lang\th.txt.basta
C:\Archivos de programa\7-Zip\Lang\sw.txt.basta
C:\Archivos de programa\7-Zip\Lang\sv.txt.basta
C:\Archivos de programa\7-Zip\Lang\va.txt.basta
C:\Archivos de programa\7-Zip\Lang\vi.txt.basta
C:\Archivos de programa\7-Zip\Lang\zh-tw.txt.basta
C:\Archivos de programa\RUXIM\ar-SA
C:\Archivos de programa\RUXIM\ar-SA\*
C:\Archivos de programa\RUXIM\ar-SA\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\Assets\*
C:\Archivos de programa\RUXIM\Assets\EOS.scale-100.png
C:\Archivos de programa\RUXIM\Assets\EOS.scale-140.png
C:\Archivos de programa\RUXIM\Assets\EOS.scale-180.png
C:\Archivos de programa\RUXIM\Assets\EOS.scale-200.png
C:\Archivos de programa\RUXIM\Assets\EOS.scale-240.png
C:\Archivos de programa\RUXIM\Assets\MainGraphic.gif
C:\Archivos de programa\RUXIM\Assets\MicrosoftLogoAndText.png
C:\Archivos de programa\RUXIM\Assets\Tile1.scale-100.png
C:\Archivos de programa\RUXIM\bg-bg
C:\Archivos de programa\RUXIM\bg-bg\*
C:\Archivos de programa\RUXIM\bg-bg\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\cs-cz
C:\Archivos de programa\RUXIM\cs-cz\*
C:\Archivos de programa\RUXIM\cs-cz\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\da-dk\*
C:\Archivos de programa\RUXIM\da-dk\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\de-DE\*
C:\Archivos de programa\RUXIM\de-DE\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\el-gr
C:\Archivos de programa\RUXIM\el-gr\*
C:\Archivos de programa\RUXIM\el-gr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\en-gb
C:\Archivos de programa\RUXIM\en-gb\*
C:\Archivos de programa\RUXIM\en-gb\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\en-us\*
C:\Archivos de programa\RUXIM\ar-SA\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\en-us\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\es-es\*
C:\Archivos de programa\RUXIM\es-es\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\es-MX
C:\Archivos de programa\RUXIM\es-MX\*
C:\Archivos de programa\RUXIM\es-MX\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\et-ee\*
C:\Archivos de programa\RUXIM\et-ee\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fi-fi\*
C:\Archivos de programa\RUXIM\fi-fi\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fr-CA\*
C:\Archivos de programa\RUXIM\fr-CA\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fr-FR\*
C:\Archivos de programa\RUXIM\fr-FR\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\he-IL\*
C:\Archivos de programa\RUXIM\hr-hr\
C:\Archivos de programa\RUXIM\hr-hr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\hu-hu\*
C:\Archivos de programa\RUXIM\hu-hu\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\it-it\*
C:\Archivos de programa\RUXIM\it-it\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\ja-JP\*
C:\Archivos de programa\RUXIM\ja-JP\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\ko-kr\*
C:\Archivos de programa\RUXIM\ko-kr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\lt-lt\*
C:\Archivos de programa\RUXIM\lt-lt\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\lv-lv\*
C:\Archivos de programa\RUXIM\lv-lv\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\nb-no\*
C:\Archivos de programa\RUXIM\nb-no\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\nl-NL\*
C:\Archivos de programa\RUXIM\nl-NL\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pl-pl\*
C:\Archivos de programa\RUXIM\pt-br\*
C:\Archivos de programa\RUXIM\pt-br\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pt-pt\*
C:\Archivos de programa\RUXIM\Assets\EOS.scale-100.png.basta
C:\Archivos de programa\RUXIM\pt-pt\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\sk-sk\*
C:\Archivos de programa\RUXIM\sk-sk\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\sl-si\*
C:\Archivos de programa\RUXIM\sl-si\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\sr-Latn-RS\*
C:\Archivos de programa\RUXIM\sr-Latn-RS\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\sv-se\*
C:\Archivos de programa\RUXIM\sv-se\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\th-th\*
C:\Archivos de programa\RUXIM\th-th\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\tr-tr\*
C:\Archivos de programa\RUXIM\uk-ua\*
C:\Archivos de programa\RUXIM\uk-ua\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\zh-cn\*
C:\Archivos de programa\RUXIM\zh-cn\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\zh-TW\*
C:\Archivos de programa\RUXIM\zh-TW\RUXIMUXResources.dll.mui
C:\Archivos de programa\VideoLAN\VLC
C:\Archivos de programa\VideoLAN\VLC\*
C:\Archivos de programa\VideoLAN\VLC\AUTHORS.txt
C:\Archivos de programa\VideoLAN\VLC\axvlc.dll
C:\Archivos de programa\VideoLAN\VLC\COPYING.txt
C:\Archivos de programa\VideoLAN\VLC\Documentation.url
C:\Archivos de programa\VideoLAN\VLC\hrtfs
C:\Archivos de programa\VideoLAN\VLC\hrtfs\readme.txt
C:\Archivos de programa\VideoLAN\VLC\libvlccore.dll
C:\Archivos de programa\VideoLAN\VLC\locale
C:\Archivos de programa\VideoLAN\VLC\locale\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua
C:\Archivos de programa\VideoLAN\VLC\skins\readme.txt
C:\Archivos de programa\VideoLAN\VLC\THANKS.txt
C:\Archivos de programa\VideoLAN\VLC\uninstall.exe
C:\Archivos de programa\VideoLAN\VLC\uninstall.log
C:\Archivos de programa\VideoLAN\VLC\VideoLAN Website.url
C:\Archivos de programa\VideoLAN\VLC\vlc-cache-gen.exe
C:\Archivos de programa\VideoLAN\VLC\vlc.exe
C:\Archivos de programa\RUXIM\Assets\EOS.scale-140.png.basta
C:\tmp_4c73x2e\dll\capemon_x64.dll.basta
C:\Archivos de programa\RUXIM\Assets\MicrosoftLogoAndText.png.basta
C:\Archivos de programa\RUXIM\Assets\Tile1.scale-100.png.basta
C:\Archivos de programa\RUXIM\bg-bg\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\cs-cz\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-200.png.basta
C:\Archivos de programa\RUXIM\de-DE\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\el-gr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\en-gb\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\en-us\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-180.png.basta
C:\Archivos de programa\RUXIM\da-dk\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\es-es\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\es-MX\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\et-ee\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\fi-fi\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\he-IL\RUXIMUXResources.dll.mui
C:\Program Files\7-Zip\Lang\*
C:\Program Files\7-Zip\Lang\af.txt.basta
C:\Program Files\7-Zip\Lang\an.txt.basta
C:\Program Files\7-Zip\Lang\ar.txt.basta
C:\Program Files\7-Zip\Lang\ast.txt.basta
C:\Program Files\7-Zip\Lang\az.txt.basta
C:\Program Files\7-Zip\Lang\ba.txt.basta
C:\Program Files\7-Zip\Lang\be.txt.basta
C:\Program Files\7-Zip\Lang\bg.txt.basta
C:\Program Files\7-Zip\Lang\bn.txt.basta
C:\Program Files\7-Zip\Lang\br.txt.basta
C:\Program Files\7-Zip\Lang\ca.txt.basta
C:\Program Files\7-Zip\Lang\co.txt.basta
C:\Program Files\7-Zip\Lang\cs.txt.basta
C:\Program Files\7-Zip\Lang\cy.txt.basta
C:\Program Files\7-Zip\Lang\da.txt.basta
C:\Program Files\7-Zip\Lang\de.txt.basta
C:\Program Files\7-Zip\Lang\el.txt.basta
C:\Program Files\7-Zip\Lang\en.ttt.basta
C:\Program Files\7-Zip\Lang\eo.txt.basta
C:\Program Files\7-Zip\Lang\es.txt.basta
C:\Program Files\7-Zip\Lang\et.txt.basta
C:\Program Files\7-Zip\Lang\eu.txt.basta
C:\Program Files\7-Zip\Lang\ext.txt.basta
C:\Program Files\7-Zip\Lang\fa.txt.basta
C:\Program Files\7-Zip\Lang\fi.txt.basta
C:\Program Files\7-Zip\Lang\fr.txt.basta
C:\Program Files\7-Zip\Lang\fur.txt.basta
C:\Program Files\7-Zip\Lang\fy.txt.basta
C:\Program Files\7-Zip\Lang\ga.txt.basta
C:\Program Files\7-Zip\Lang\gl.txt.basta
C:\Program Files\7-Zip\Lang\gu.txt.basta
C:\Program Files\7-Zip\Lang\he.txt.basta
C:\Program Files\7-Zip\Lang\hi.txt.basta
C:\Program Files\7-Zip\Lang\hr.txt.basta
C:\Program Files\7-Zip\Lang\hu.txt.basta
C:\Program Files\7-Zip\Lang\hy.txt.basta
C:\Program Files\7-Zip\Lang\id.txt.basta
C:\Program Files\7-Zip\Lang\io.txt.basta
C:\Program Files\7-Zip\Lang\is.txt.basta
C:\Program Files\7-Zip\Lang\it.txt.basta
C:\Program Files\7-Zip\Lang\ja.txt.basta
C:\Program Files\7-Zip\Lang\ka.txt.basta
C:\Program Files\7-Zip\Lang\kaa.txt.basta
C:\Program Files\7-Zip\Lang\kab.txt.basta
C:\Program Files\7-Zip\Lang\kk.txt.basta
C:\Program Files\7-Zip\Lang\ko.txt.basta
C:\Program Files\7-Zip\Lang\ku-ckb.txt.basta
C:\Program Files\7-Zip\Lang\ku.txt.basta
C:\Program Files\7-Zip\Lang\ky.txt.basta
C:\Program Files\7-Zip\Lang\lij.txt.basta
C:\Program Files\7-Zip\Lang\lt.txt.basta
C:\Program Files\7-Zip\Lang\lv.txt.basta
C:\Program Files\7-Zip\Lang\mk.txt.basta
C:\Program Files\7-Zip\Lang\mn.txt.basta
C:\Program Files\7-Zip\Lang\mng.txt.basta
C:\Program Files\7-Zip\Lang\mng2.txt.basta
C:\Program Files\7-Zip\Lang\mr.txt.basta
C:\Program Files\7-Zip\Lang\ms.txt.basta
C:\Program Files\7-Zip\Lang\nb.txt.basta
C:\Program Files\7-Zip\Lang\ne.txt.basta
C:\Program Files\7-Zip\Lang\nl.txt.basta
C:\Program Files\7-Zip\Lang\nn.txt.basta
C:\Program Files\7-Zip\Lang\pa-in.txt.basta
C:\Program Files\7-Zip\Lang\pl.txt.basta
C:\Program Files\7-Zip\Lang\ps.txt.basta
C:\Program Files\7-Zip\Lang\pt-br.txt.basta
C:\Program Files\7-Zip\Lang\pt.txt.basta
C:\Program Files\7-Zip\Lang\ro.txt.basta
C:\Program Files\7-Zip\Lang\ru.txt.basta
C:\Program Files\7-Zip\Lang\sa.txt.basta
C:\Program Files\7-Zip\Lang\si.txt.basta
C:\Program Files\7-Zip\Lang\sk.txt.basta
C:\Program Files\7-Zip\Lang\sl.txt.basta
C:\Program Files\7-Zip\Lang\sq.txt.basta
C:\Program Files\7-Zip\Lang\sr-spc.txt.basta
C:\Program Files\7-Zip\Lang\sr-spl.txt.basta
C:\Program Files\7-Zip\Lang\sv.txt.basta
C:\Program Files\7-Zip\Lang\sw.txt.basta
C:\Program Files\7-Zip\Lang\ta.txt.basta
C:\Program Files\7-Zip\Lang\tg.txt.basta
C:\Program Files\7-Zip\Lang\th.txt.basta
C:\Program Files\7-Zip\Lang\tk.txt.basta
C:\Program Files\7-Zip\Lang\tr.txt.basta
C:\Program Files\7-Zip\Lang\tt.txt.basta
C:\Program Files\7-Zip\Lang\ug.txt.basta
C:\Program Files\7-Zip\Lang\uk.txt.basta
C:\Program Files\7-Zip\Lang\uz-cyrl.txt.basta
C:\Program Files\7-Zip\Lang\uz.txt.basta
C:\Program Files\7-Zip\Lang\va.txt.basta
C:\Program Files\7-Zip\Lang\vi.txt.basta
C:\Program Files\7-Zip\Lang\yo.txt.basta
C:\Program Files\7-Zip\Lang\zh-cn.txt.basta
C:\Program Files\7-Zip\Lang\zh-tw.txt.basta
C:\Archivos de programa\RUXIM\fr-CA\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\he-IL\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\fr-FR\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-240.png.basta
C:\Archivos de programa\RUXIM\hr-hr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\hu-hu\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\it-it\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ja-JP\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ko-kr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\lt-lt\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\pl-pl\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pl-pl\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\lv-lv\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ro-ro\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pt-br\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ru-RU\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\nb-no\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\nl-NL\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\pt-pt\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\sk-sk\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\uk-ua\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\zh-cn\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\th-th\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\VideoLAN\VLC\AUTHORS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\COPYING.txt.basta
C:\Archivos de programa\VideoLAN\VLC\libvlc.dll
C:\Archivos de programa\VideoLAN\VLC\NEWS.txt
C:\Archivos de programa\RUXIM\zh-TW\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\VideoLAN\VLC\New_Skins.url
C:\Archivos de programa\VideoLAN\VLC\New_Skins.url.basta
C:\Archivos de programa\VideoLAN\VLC\npvlc.dll
C:\Archivos de programa\VideoLAN\VLC\libvlc.dll.basta
C:\Archivos de programa\VideoLAN\VLC\README.txt
C:\Archivos de programa\VideoLAN\VLC\README.txt.basta
C:\Archivos de programa\VideoLAN\VLC\THANKS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\NEWS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\uninstall.log.basta
C:\Archivos de programa\VideoLAN\VLC\VideoLAN Website.url.basta
C:\Archivos de programa\VideoLAN\VLC\uninstall.exe.basta
C:\Archivos de programa\VideoLAN\VLC\vlc-cache-gen.exe.basta
C:\Program Files\Archivos comunes\microsoft shared\ink
C:\Program Files\Archivos comunes\microsoft shared\ink\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\MSInfo
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\Stationery
C:\Program Files\Archivos comunes\microsoft shared\Stationery\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\TextConv
C:\Program Files\Archivos comunes\microsoft shared\TextConv\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\Triedit
C:\Program Files\Archivos comunes\microsoft shared\Triedit\readme.txt
C:\Program Files\Archivos comunes\System\en-US
C:\Program Files\Archivos comunes\System\es-ES
C:\Program Files\Archivos comunes\System\es-ES\readme.txt
C:\Program Files\Archivos comunes\System\msadc
C:\Program Files\Archivos comunes\System\msadc\readme.txt
C:\Program Files\Archivos comunes\System\Ole DB
C:\Program Files\Archivos comunes\System\Ole DB\readme.txt
C:\Program Files\Archivos comunes\System\wab32.dll
C:\Program Files\Archivos comunes\System\wab32res.dll
C:\Program Files\Common Files\microsoft shared\*
C:\Program Files\Common Files\microsoft shared\ink
C:\Program Files\Common Files\microsoft shared\ink\readme.txt
C:\Program Files\Common Files\microsoft shared\MSInfo
C:\Program Files\Common Files\microsoft shared\MSInfo\readme.txt
C:\Program Files\Common Files\microsoft shared\Stationery
C:\Program Files\Common Files\microsoft shared\Stationery\readme.txt
C:\Program Files\Common Files\microsoft shared\TextConv
C:\Program Files\Common Files\microsoft shared\TextConv\readme.txt
C:\Program Files\Common Files\microsoft shared\Triedit
C:\Program Files\Common Files\microsoft shared\Triedit\readme.txt
C:\Program Files\Common Files\microsoft shared\VGX
C:\Program Files\Common Files\microsoft shared\VGX\readme.txt
C:\Program Files\Common Files\Services
C:\Program Files\Common Files\Services\*
C:\Program Files\Common Files\Services\verisign.bmp
C:\Program Files\Common Files\System\*
C:\Program Files\Common Files\System\ado
C:\Program Files\Common Files\System\ado\readme.txt
C:\Program Files\Common Files\System\en-US
C:\Program Files\Common Files\System\en-US\readme.txt
C:\Program Files\Common Files\System\es-ES
C:\Program Files\Common Files\System\es-ES\readme.txt
C:\Program Files\Common Files\System\msadc
C:\Program Files\Common Files\System\msadc\readme.txt
C:\Program Files\Common Files\System\Ole DB
C:\Program Files\Common Files\System\Ole DB\readme.txt
C:\Program Files\Common Files\System\wab32.dll
C:\Program Files\Common Files\System\wab32res.dll
C:\Program Files\Google\Chrome\Application
C:\Program Files\Google\Chrome\Application\readme.txt
C:\Program Files\Google\Chrome\Temp
C:\Program Files\Google\Chrome\Temp\readme.txt
C:\Program Files\Internet Explorer\en-US\*
C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui
C:\Program Files\Internet Explorer\es-ES\*
C:\Program Files\Internet Explorer\es-ES\ieinstal.exe.mui
C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui
C:\Program Files\Internet Explorer\images\*
C:\Program Files\Internet Explorer\images\bing.ico
C:\Program Files\Internet Explorer\SIGNUP\*
C:\Program Files\Internet Explorer\SIGNUP\install.ins.basta
C:\Program Files\Microsoft Update Health Tools\Logs\*
C:\Program Files\RUXIM\ar-SA\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\Assets\*
C:\Program Files\RUXIM\Assets\EOS.scale-100.png.basta
C:\Program Files\RUXIM\Assets\EOS.scale-140.png.basta
C:\Program Files\RUXIM\Assets\EOS.scale-180.png.basta
C:\Program Files\RUXIM\Assets\EOS.scale-200.png.basta
C:\Program Files\RUXIM\Assets\EOS.scale-240.png.basta
C:\Program Files\RUXIM\Assets\MainGraphic.gif
C:\Program Files\RUXIM\Assets\MicrosoftLogoAndText.png.basta
C:\Program Files\RUXIM\Assets\Tile1.scale-100.png.basta
C:\Program Files\RUXIM\bg-bg\*
C:\Program Files\RUXIM\bg-bg\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\cs-cz\*
C:\Program Files\RUXIM\cs-cz\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\da-dk\*
C:\Program Files\RUXIM\da-dk\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\de-DE\*
C:\Program Files\RUXIM\de-DE\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\el-gr\*
C:\Program Files\RUXIM\el-gr\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\en-gb\*
C:\Program Files\RUXIM\en-gb\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\en-us\*
C:\Program Files\RUXIM\en-us\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\es-es
C:\Program Files\RUXIM\es-es\*
C:\Program Files\RUXIM\es-es\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\es-MX\*
C:\Program Files\RUXIM\es-MX\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\et-ee\*
C:\Program Files\RUXIM\et-ee\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\fi-fi\*
C:\Program Files\RUXIM\fi-fi\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\fr-CA
C:\Program Files\RUXIM\fr-CA\*
C:\Program Files\RUXIM\fr-CA\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\fr-FR
C:\Program Files\RUXIM\fr-FR\*
C:\Program Files\RUXIM\fr-FR\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\he-IL\*
C:\Program Files\RUXIM\he-IL\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\hr-hr\*
C:\Program Files\RUXIM\hr-hr\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\hu-hu\*
C:\Program Files\RUXIM\hu-hu\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\it-it\*
C:\Program Files\RUXIM\it-it\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\ja-JP\*
C:\Program Files\RUXIM\ja-JP\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\ko-kr\*
C:\Program Files\RUXIM\ko-kr\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\lt-lt\*
C:\Program Files\RUXIM\lt-lt\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\lv-lv\*
C:\Program Files\RUXIM\lv-lv\RUXIMUXResources.dll.mui.basta
C:\Program Files\Archivos comunes\Services\verisign.bmp
C:\Program Files\RUXIM\nb-no\*
C:\Program Files\RUXIM\nl-NL\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\pl-pl\*
C:\Program Files\RUXIM\nb-no\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\pl-pl\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\pt-br\*
C:\Program Files\RUXIM\pt-br\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\pt-pt\*
C:\Program Files\RUXIM\pt-pt\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\ro-ro\*
C:\Program Files\RUXIM\ro-ro\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\ru-RU\*
C:\Program Files\RUXIM\ru-RU\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\sk-sk\*
C:\Program Files\RUXIM\sk-sk\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\sl-si\*
C:\Program Files\RUXIM\sl-si\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\sr-Latn-RS\*
C:\Program Files\RUXIM\sr-Latn-RS\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\sv-se\*
C:\Program Files\RUXIM\sv-se\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\th-th\*
C:\Program Files\RUXIM\tr-tr\*
C:\Program Files\RUXIM\uk-ua\*
C:\Program Files\RUXIM\uk-ua\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\zh-cn\*
C:\Program Files\RUXIM\zh-cn\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\zh-TW
C:\Program Files\RUXIM\zh-TW\*
C:\Program Files\RUXIM\zh-TW\RUXIMUXResources.dll.mui.basta
C:\Program Files\VideoLAN\VLC\*
C:\Program Files\VideoLAN\VLC\AUTHORS.txt.basta
C:\Program Files\VideoLAN\VLC\axvlc.dll
C:\Program Files\VideoLAN\VLC\COPYING.txt.basta
C:\Program Files\VideoLAN\VLC\Documentation.url.basta
C:\Program Files\VideoLAN\VLC\hrtfs
C:\Program Files\VideoLAN\VLC\hrtfs\readme.txt
C:\Program Files\VideoLAN\VLC\libvlccore.dll
C:\Program Files\VideoLAN\VLC\locale
C:\Program Files\VideoLAN\VLC\locale\readme.txt
C:\Program Files\VideoLAN\VLC\lua
C:\Program Files\VideoLAN\VLC\NEWS.txt.basta
C:\Program Files\VideoLAN\VLC\New_Skins.url.basta
C:\Program Files\RUXIM\th-th\RUXIMUXResources.dll.mui.basta
C:\Program Files\RUXIM\tr-tr\RUXIMUXResources.dll.mui.basta
C:\Program Files\VideoLAN\VLC\npvlc.dll
C:\Program Files\VideoLAN\VLC\plugins
C:\Program Files\VideoLAN\VLC\plugins\readme.txt
C:\Program Files\VideoLAN\VLC\libvlc.dll.basta
C:\Program Files\VideoLAN\VLC\README.txt.basta
C:\Program Files\VideoLAN\VLC\skins\readme.txt
C:\Program Files\VideoLAN\VLC\uninstall.exe.basta
C:\Program Files\VideoLAN\VLC\VideoLAN Website.url.basta
C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.basta
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\*
C:\Program Files\VideoLAN\VLC\THANKS.txt.basta
C:\Program Files\VideoLAN\VLC\uninstall.log.basta
C:\Program Files (x86)\Common Files\Microsoft Shared\DAO
C:\Program Files (x86)\Common Files\Microsoft Shared\Filters
C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\ink
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\Stationery\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv
C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit
C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\VGX
C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\readme.txt
C:\Program Files (x86)\Common Files\Services\*
C:\Program Files (x86)\Common Files\Services\verisign.bmp
C:\Program Files (x86)\Common Files\System\*
C:\Program Files (x86)\Common Files\System\ado
C:\Program Files (x86)\Common Files\System\ado\readme.txt
C:\Program Files (x86)\Common Files\System\en-US
C:\Program Files (x86)\Common Files\System\en-US\readme.txt
C:\Program Files (x86)\Common Files\System\es-ES
C:\Program Files (x86)\Common Files\System\es-ES\readme.txt
C:\Program Files (x86)\Common Files\System\msadc
C:\Program Files (x86)\Common Files\System\msadc\readme.txt
C:\Program Files (x86)\Common Files\System\Ole DB
C:\Program Files (x86)\Common Files\System\Ole DB\readme.txt
C:\Program Files (x86)\Common Files\System\wab32.dll
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\readme.txt
C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
C:\Program Files (x86)\Google\GoogleUpdater\updater.log
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.old
C:\Program Files (x86)\Google\Update\*
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Internet Explorer\en-US\*
C:\Program Files (x86)\Internet Explorer\en-US\hmmapi.dll.mui
C:\Program Files (x86)\Internet Explorer\es-ES\*
C:\Program Files (x86)\Internet Explorer\es-ES\ieinstal.exe.mui
C:\Program Files (x86)\Internet Explorer\images\*
C:\Program Files (x86)\Internet Explorer\SIGNUP\*
C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins
C:\Program Files (x86)\Microsoft\Edge\*
C:\Program Files (x86)\Microsoft\Edge\Application
C:\Program Files (x86)\Microsoft\Edge\Application\readme.txt
C:\Program Files (x86)\Microsoft\Edge\Edge.dat
C:\Program Files (x86)\Microsoft\Edge\Edge.dat.LOG1
C:\Program Files (x86)\Microsoft\Edge\Edge.dat.LOG2
C:\Program Files (x86)\Microsoft\EdgeCore\*
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\*
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\Offline
C:\Program Files (x86)\Microsoft\EdgeWebView\*
C:\Program Files (x86)\Microsoft\EdgeWebView\Application
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\readme.txt
C:\Program Files (x86)\Microsoft\Temp\*
C:\Program Files (x86)\Microsoft.NET\RedistList\*
C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml
C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml
C:\ProgramData\Datos de programa\Datos de programa\*
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Documentos
C:\ProgramData\Datos de programa\Datos de programa\Documentos\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Escritorio
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft
C:\ProgramData\Datos de programa\Datos de programa\Microsoft OneDrive
C:\ProgramData\Datos de programa\Datos de programa\Microsoft OneDrive\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Package Cache\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages
C:\ProgramData\Datos de programa\Datos de programa\Packages\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Plantillas
C:\ProgramData\Datos de programa\Datos de programa\Plantillas\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\regid.1991-06.com.microsoft
C:\ProgramData\Datos de programa\Datos de programa\regid.1991-06.com.microsoft\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\SoftwareDistribution
C:\ProgramData\Datos de programa\Datos de programa\SoftwareDistribution\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\ssh
C:\ProgramData\Datos de programa\Datos de programa\ssh\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\USOPrivate
C:\ProgramData\Datos de programa\Datos de programa\USOPrivate\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\USOShared
C:\ProgramData\Datos de programa\Documentos\*
C:\ProgramData\Datos de programa\Documentos\desktop.ini
C:\ProgramData\Datos de programa\Documentos\Mi m\xfasica
C:\ProgramData\Datos de programa\Documentos\Mi m\xfasica\readme.txt
C:\ProgramData\Datos de programa\Documentos\Mis im\xe1genes
C:\Program Files (x86)\Google\GoogleUpdater\prefs.json.basta
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.basta
C:\Archivos de programa\VideoLAN\VLC\axvlc.dll.basta
C:\tmp_4c73x2e\bin\Procmon.exe.basta
C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui
C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins.basta
C:\Program Files (x86)\Microsoft\Edge\Edge.dat.basta
C:\Archivos de programa\VideoLAN\VLC\vlc.exe.basta
C:\ProgramData\Datos de programa\Documentos\Mis im\xe1genes\readme.txt
C:\ProgramData\Datos de programa\Documentos\Mis v\xeddeos
C:\ProgramData\Datos de programa\Documentos\Mis v\xeddeos\readme.txt
C:\Archivos de programa\VideoLAN\VLC\npvlc.dll.basta
C:\ProgramData\Datos de programa\Escritorio\*
C:\ProgramData\Datos de programa\Escritorio\desktop.ini
C:\ProgramData\Datos de programa\Escritorio\Google Chrome.lnk.basta
C:\ProgramData\Datos de programa\Escritorio\VLC media player.lnk.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\*
C:\ProgramData\Datos de programa\Men\xfa Inicio\desktop.ini
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\readme.txt
C:\ProgramData\Datos de programa\Microsoft\*
C:\ProgramData\Datos de programa\Microsoft\Crypto
C:\ProgramData\Datos de programa\Microsoft\Crypto\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Device Stage
C:\ProgramData\Datos de programa\Microsoft\Device Stage\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DeviceSync
C:\ProgramData\Datos de programa\Microsoft\DeviceSync\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DRM
C:\ProgramData\Datos de programa\Microsoft\DRM\readme.txt
C:\ProgramData\Datos de programa\Microsoft\EdgeUpdate
C:\ProgramData\Datos de programa\Microsoft\EdgeUpdate\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Event Viewer
C:\ProgramData\Datos de programa\Microsoft\Event Viewer\readme.txt
C:\ProgramData\Datos de programa\Microsoft\IdentityCRL
C:\ProgramData\Datos de programa\Microsoft\IdentityCRL\readme.txt
C:\ProgramData\Datos de programa\Microsoft\MapData\readme.txt
C:\ProgramData\Datos de programa\Microsoft\MF
C:\ProgramData\Datos de programa\Microsoft\MF\readme.txt
C:\ProgramData\Datos de programa\Microsoft\NetFramework
C:\ProgramData\Datos de programa\Microsoft\NetFramework\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Network
C:\ProgramData\Datos de programa\Microsoft\Network\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Provisioning
C:\ProgramData\Datos de programa\Microsoft\Search
C:\ProgramData\Datos de programa\Microsoft\Search\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Settings\readme.txt
C:\ProgramData\Datos de programa\Escritorio\Microsoft Edge.lnk.basta
C:\ProgramData\Datos de programa\Microsoft\SmsRouter
C:\ProgramData\Datos de programa\Microsoft\SmsRouter\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Spectrum
C:\ProgramData\Datos de programa\Microsoft\Spectrum\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Speech_OneCore
C:\ProgramData\Datos de programa\Microsoft\Speech_OneCore\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Storage Health\readme.txt
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Vault
C:\ProgramData\Datos de programa\Microsoft\Vault\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WDF
C:\ProgramData\Datos de programa\Microsoft\WDF\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WinMSIPC\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WwanSvc
C:\ProgramData\Datos de programa\Microsoft\WwanSvc\readme.txt
C:\ProgramData\Datos de programa\Microsoft OneDrive\*
C:\ProgramData\Datos de programa\Microsoft OneDrive\setup
C:\ProgramData\Datos de programa\Microsoft OneDrive\setup\readme.txt
C:\ProgramData\Datos de programa\Package Cache\*
C:\ProgramData\Datos de programa\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0
C:\ProgramData\Datos de programa\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\readme.txt
C:\ProgramData\Datos de programa\Packages\*
C:\ProgramData\Datos de programa\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.GetHelp_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.Getstarted_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
C:\ProgramData\Datos de programa\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.YourPhone_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe
C:\ProgramData\Datos de programa\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Plantillas\*
C:\ProgramData\Datos de programa\regid.1991-06.com.microsoft\*
C:\ProgramData\Datos de programa\SoftwareDistribution\*
C:\ProgramData\Datos de programa\ssh\*
C:\ProgramData\Datos de programa\USOPrivate\*
C:\ProgramData\Datos de programa\USOPrivate\UpdateStore
C:\ProgramData\Datos de programa\USOPrivate\UpdateStore\readme.txt
C:\ProgramData\Datos de programa\USOShared\*
C:\ProgramData\Datos de programa\USOShared\Logs
C:\ProgramData\Datos de programa\USOShared\Logs\readme.txt
C:\ProgramData\Documentos\Mi m\xfasica\*
C:\ProgramData\Documentos\Mi m\xfasica\desktop.ini
C:\ProgramData\Documentos\Mis im\xe1genes\*
C:\ProgramData\Documentos\Mis im\xe1genes\desktop.ini
C:\ProgramData\Documentos\Mis v\xeddeos\*
C:\ProgramData\Documentos\Mis v\xeddeos\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\*
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\Accessibility
C:\ProgramData\Men\xfa Inicio\Programas\Accessibility\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\Accessories
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\readme.txt
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.old.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\readme.txt
C:\Archivos de programa\VideoLAN\VLC\libvlccore.dll.basta
C:\ProgramData\Men\xfa Inicio\Programas\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\Google Chrome.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Google Chrome.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Immersive Control Panel.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Maintenance
C:\ProgramData\Men\xfa Inicio\Programas\Maintenance\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\Microsoft Edge.lnk
C:\ProgramData\Men\xfa Inicio\Programas\StartUp
C:\ProgramData\Men\xfa Inicio\Programas\StartUp\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\Microsoft Edge.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\System Tools
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\*
C:\ProgramData\Men\xfa Inicio\Programs\7-Zip
C:\ProgramData\Men\xfa Inicio\Programs\7-Zip\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\Accessibility
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessibility\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\Accessories
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\Google Chrome.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Immersive Control Panel.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Maintenance
C:\ProgramData\Men\xfa Inicio\Programs\Maintenance\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\Microsoft Edge.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\StartUp
C:\ProgramData\Men\xfa Inicio\Programs\StartUp\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\System Tools
C:\ProgramData\Men\xfa Inicio\Programs\System Tools\readme.txt
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\readme.txt
C:\ProgramData\Microsoft\Crypto\*
C:\ProgramData\Microsoft\Crypto\DSS
C:\ProgramData\Microsoft\Crypto\DSS\readme.txt
C:\ProgramData\Microsoft\Crypto\Keys
C:\ProgramData\Microsoft\Crypto\Keys\readme.txt
C:\ProgramData\Microsoft\Crypto\PCPKSP
C:\ProgramData\Microsoft\Crypto\PCPKSP\readme.txt
C:\ProgramData\Microsoft\Crypto\RSA
C:\ProgramData\Microsoft\Crypto\RSA\readme.txt
C:\ProgramData\Microsoft\Crypto\SystemKeys
C:\ProgramData\Microsoft\Crypto\SystemKeys\readme.txt
C:\ProgramData\Microsoft\Device Stage
C:\ProgramData\Microsoft\Device Stage\*
C:\ProgramData\Microsoft\Device Stage\Device
C:\ProgramData\Microsoft\Device Stage\Device\readme.txt
C:\ProgramData\Microsoft\Device Stage\Task
C:\ProgramData\Microsoft\Device Stage\Task\readme.txt
C:\ProgramData\Microsoft\DeviceSync
C:\ProgramData\Microsoft\DeviceSync\*
C:\ProgramData\Microsoft\Diagnosis
C:\ProgramData\Microsoft\Diagnosis\*
C:\ProgramData\Microsoft\Diagnosis\AggregatorStorage
C:\ProgramData\Microsoft\Diagnosis\AggregatorStorage\readme.txt
C:\ProgramData\Microsoft\Diagnosis\CustomTraceProfiles
C:\ProgramData\Microsoft\Diagnosis\CustomTraceProfiles\readme.txt
C:\ProgramData\Microsoft\Diagnosis\DownloadedScenarios
C:\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\readme.txt
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\readme.txt
C:\ProgramData\Microsoft\Diagnosis\ETLLogs
C:\ProgramData\Microsoft\Diagnosis\ETLLogs\readme.txt
C:\ProgramData\Microsoft\Diagnosis\EventStore.db
C:\ProgramData\Microsoft\Diagnosis\EventStore.db-shm
C:\ProgramData\Microsoft\Diagnosis\EventStore.db-wal
C:\ProgramData\Microsoft\Diagnosis\EventTranscript
C:\ProgramData\Microsoft\Diagnosis\EventTranscript\readme.txt
C:\ProgramData\Microsoft\Diagnosis\FeedbackHub
C:\ProgramData\Microsoft\Diagnosis\FeedbackHub\readme.txt
C:\ProgramData\Microsoft\Diagnosis\LocalTraceStore
C:\ProgramData\Microsoft\Diagnosis\LocalTraceStore\readme.txt
C:\ProgramData\Microsoft\Diagnosis\osver.txt
C:\ProgramData\Microsoft\Diagnosis\parse.dat
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\readme.txt
C:\ProgramData\Microsoft\Diagnosis\Sideload
C:\ProgramData\Microsoft\Diagnosis\Sideload\readme.txt
C:\ProgramData\Microsoft\Diagnosis\Siufloc
C:\ProgramData\Microsoft\Diagnosis\Siufloc\readme.txt
C:\ProgramData\Microsoft\Diagnosis\SoftLanding
C:\ProgramData\Microsoft\Diagnosis\SoftLandingStage
C:\ProgramData\Microsoft\Diagnosis\SoftLandingStage\readme.txt
C:\ProgramData\Microsoft\Diagnosis\Temp
C:\ProgramData\Microsoft\Diagnosis\Temp\readme.txt
C:\ProgramData\Microsoft\Diagnosis\TenantStorage
C:\ProgramData\Microsoft\Diagnosis\TimeTravelDebuggingStorage
C:\ProgramData\Microsoft\Diagnosis\TimeTravelDebuggingStorage\readme.txt
C:\ProgramData\Microsoft\DiagnosticLogCSP\*
C:\ProgramData\Microsoft\DiagnosticLogCSP\Channels
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors
C:\ProgramData\Microsoft\DiagnosticLogCSP\DeviceStateData
C:\ProgramData\Microsoft\DiagnosticLogCSP\DeviceStateData\readme.txt
C:\ProgramData\Microsoft\DRM\*
C:\ProgramData\Microsoft\DRM\Server
C:\ProgramData\Microsoft\Diagnosis\parse.dat.basta
C:\ProgramData\Microsoft\DRM\Server\readme.txt
C:\ProgramData\Microsoft\EdgeUpdate\*
C:\ProgramData\Microsoft\EdgeUpdate\Log
C:\ProgramData\Microsoft\EdgeUpdate\Log\readme.txt
C:\ProgramData\Microsoft\IdentityCRL\INT\readme.txt
C:\ProgramData\Microsoft\IdentityCRL\production
C:\ProgramData\Microsoft\IdentityCRL\production\readme.txt
C:\ProgramData\Microsoft\MapData\*
C:\ProgramData\Microsoft\Diagnosis\osver.txt.basta
C:\ProgramData\Microsoft\MF\*
C:\ProgramData\Microsoft\MF\Active.GRL
C:\ProgramData\Microsoft\MF\Pending.GRL
C:\ProgramData\Microsoft\NetFramework\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore
C:\ProgramData\Microsoft\Network\*
C:\ProgramData\Microsoft\Network\Connections
C:\ProgramData\Microsoft\Network\Connections\readme.txt
C:\ProgramData\Microsoft\Network\Downloader
C:\ProgramData\Microsoft\Network\Downloader\readme.txt
C:\ProgramData\Microsoft\Provisioning\AssetCache
C:\ProgramData\Microsoft\Provisioning\AssetCache\readme.txt
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG1
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG2
C:\ProgramData\Microsoft\Search\*
C:\ProgramData\Microsoft\Search\Data
C:\ProgramData\Microsoft\Search\Data\readme.txt
C:\ProgramData\Microsoft\Settings\*
C:\ProgramData\Microsoft\Settings\Accounts
C:\ProgramData\Microsoft\Settings\Accounts\readme.txt
C:\ProgramData\Microsoft\SmsRouter\*
C:\ProgramData\Microsoft\Spectrum\*
C:\ProgramData\Microsoft\Speech_OneCore\*
C:\ProgramData\Microsoft\Speech_OneCore\SR
C:\ProgramData\Microsoft\Speech_OneCore\SR\readme.txt
C:\ProgramData\Microsoft\Storage Health\*
C:\ProgramData\Microsoft\Storage Health\StorageHealthModel.dat
C:\ProgramData\Microsoft\User Account Pictures\*
C:\ProgramData\Microsoft\User Account Pictures\defaultuser0.dat
C:\ProgramData\Microsoft\User Account Pictures\desktop.ini
C:\ProgramData\Microsoft\User Account Pictures\guest.bmp
C:\ProgramData\Microsoft\User Account Pictures\guest.png
C:\ProgramData\Microsoft\User Account Pictures\pacop.dat
C:\ProgramData\Microsoft\User Account Pictures\user-192.png
C:\ProgramData\Microsoft\User Account Pictures\user-32.png
C:\ProgramData\Microsoft\User Account Pictures\user-40.png
C:\ProgramData\Microsoft\User Account Pictures\user-48.png
C:\ProgramData\Microsoft\User Account Pictures\user.bmp
C:\ProgramData\Microsoft\User Account Pictures\user.png
C:\ProgramData\Microsoft\Vault\*
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
C:\ProgramData\Microsoft\MF\Active.GRL.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\readme.txt
C:\ProgramData\Microsoft\WDF\*
C:\ProgramData\Microsoft\WinMSIPC\*
C:\ProgramData\Microsoft\WinMSIPC\Server
C:\ProgramData\Microsoft\WinMSIPC\Server\readme.txt
C:\ProgramData\Microsoft\WwanSvc\*
C:\ProgramData\Microsoft\WwanSvc\DMProfiles
C:\ProgramData\Microsoft\WwanSvc\DMProfiles\readme.txt
C:\ProgramData\Microsoft\WwanSvc\Profiles
C:\ProgramData\Microsoft\WwanSvc\Profiles\readme.txt
C:\ProgramData\Microsoft\User Account Pictures\defaultuser0.dat.basta
C:\ProgramData\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\*
C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\*
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\USOPrivate\UpdateStore\*
C:\ProgramData\USOPrivate\UpdateStore\store.db
C:\ProgramData\USOShared\Logs\*
C:\ProgramData\USOShared\Logs\System
C:\ProgramData\USOShared\Logs\System\readme.txt
C:\ProgramData\USOShared\Logs\User
C:\ProgramData\USOShared\Logs\User\readme.txt
C:\ProgramData\Microsoft\User Account Pictures\pacop.dat.basta
C:\tmp228rx8rl\data\yara\*
C:\ProgramData\Microsoft\User Account Pictures\user-32.png.basta
C:\tmp228rx8rl\data\yara\AgentTesla.yar
C:\ProgramData\Microsoft\User Account Pictures\user-192.png.basta
C:\ProgramData\Microsoft\User Account Pictures\guest.png.basta
C:\ProgramData\Microsoft\User Account Pictures\user-40.png.basta
C:\ProgramData\Microsoft\User Account Pictures\user-48.png.basta
C:\ProgramData\Microsoft OneDrive\setup\refcount.ini
C:\ProgramData\Microsoft OneDrive\setup\refcount.ini.basta
C:\tmp228rx8rl\data\yara\Al-khaser.yar
C:\tmp228rx8rl\data\yara\AntiCuckoo.yar
C:\ProgramData\Microsoft\User Account Pictures\user.png.basta
C:\tmp228rx8rl\data\yara\Blister.yar
C:\tmp228rx8rl\data\yara\BuerLoader.yar
C:\tmp228rx8rl\data\yara\BumbleBee.yar
C:\tmp228rx8rl\data\yara\capemon.yac
C:\tmp228rx8rl\data\yara\CargoBayLoader.yar
C:\tmp228rx8rl\data\yara\DarkGate.yar
C:\tmp228rx8rl\data\yara\DarkGateLoader.yar
C:\tmp228rx8rl\data\yara\DoomedLoader.yar
C:\tmp228rx8rl\data\yara\DridexLoader.yar
C:\tmp228rx8rl\data\yara\EmotetPacker.yar
C:\tmp228rx8rl\data\yara\Formbook.yar
C:\tmp228rx8rl\data\yara\GetTickCountAntiVM.yar
C:\tmp228rx8rl\data\yara\Guloader.yar
C:\tmp228rx8rl\data\yara\HeavensSyscall.yar
C:\tmp228rx8rl\data\yara\IcedID.yar
C:\tmp228rx8rl\data\yara\Latrodectus.yar
C:\tmp228rx8rl\data\yara\Lumma.yar
C:\tmp228rx8rl\data\yara\ModiLoader.yar
C:\tmp228rx8rl\data\yara\MysterySnail.yar
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi
C:\tmp228rx8rl\data\yara\AgentTesla.yar.basta
C:\tmp228rx8rl\data\yara\AntiCuckoo.yar.basta
C:\tmp228rx8rl\data\yara\Blister.yar.basta
C:\tmp228rx8rl\data\yara\BuerLoader.yar.basta
C:\tmp228rx8rl\data\yara\EmotetPacker.yar.basta
C:\tmp228rx8rl\data\yara\Formbook.yar.basta
C:\tmp228rx8rl\data\yara\GetTickCountAntiVM.yar.basta
C:\tmp228rx8rl\data\yara\Guloader.yar.basta
C:\tmp228rx8rl\data\yara\HeavensSyscall.yar.basta
C:\tmp228rx8rl\data\yara\IcedID.yar.basta
C:\tmp228rx8rl\data\yara\Latrodectus.yar.basta
C:\tmp228rx8rl\data\yara\Lumma.yar.basta
C:\tmp228rx8rl\data\yara\ModiLoader.yar.basta
C:\tmp228rx8rl\data\yara\MysterySnail.yar.basta
C:\tmp228rx8rl\data\yara\NSIS.yar
C:\tmp228rx8rl\data\yara\Pafish.yar
C:\tmp228rx8rl\data\yara\capemon.yac.basta
C:\tmp228rx8rl\data\yara\Pikabot.yar
C:\tmp228rx8rl\data\yara\NSIS.yar.basta
C:\tmp228rx8rl\data\yara\Pafish.yar.basta
C:\tmp228rx8rl\data\yara\Pikabot.yar.basta
C:\tmp228rx8rl\data\yara\QakBot.yar
C:\tmp228rx8rl\data\yara\RdtscpAntiVM.yar
C:\tmp228rx8rl\data\yara\QakBot.yar.basta
C:\tmp228rx8rl\data\yara\Rhadamanthys.yar
C:\tmp228rx8rl\data\yara\RdtscpAntiVM.yar.basta
C:\tmp228rx8rl\data\yara\Rhadamanthys.yar.basta
C:\tmp228rx8rl\data\yara\RisePro.yar
C:\tmp228rx8rl\data\yara\SingleStepAntiHook.yar
C:\tmp228rx8rl\data\yara\SmokeLoader.yar
C:\tmp228rx8rl\data\yara\Socks5Systemz.yar
C:\tmp228rx8rl\data\yara\Stealc.yar
C:\tmp228rx8rl\data\yara\UrsnifV3.yar
C:\tmp228rx8rl\data\yara\VBCrypter.yar
C:\tmp228rx8rl\data\yara\Zloader.yar
C:\tmp228rx8rl\lib\api\process.py
C:\tmp228rx8rl\lib\api\screenshot.py
C:\tmp228rx8rl\lib\api\utils.py
C:\tmp228rx8rl\lib\api\__init__.py
C:\tmp228rx8rl\lib\api\__pycache__
C:\tmp228rx8rl\lib\api\__pycache__\readme.txt
C:\tmp228rx8rl\lib\common\*
C:\tmp228rx8rl\lib\common\abstracts.py
C:\tmp228rx8rl\lib\common\common.py
C:\tmp228rx8rl\lib\common\constants.py
C:\tmp228rx8rl\lib\common\defines.py
C:\tmp228rx8rl\lib\common\errors.py
C:\tmp228rx8rl\lib\common\exceptions.py
C:\tmp228rx8rl\lib\common\hashing.py
C:\tmp228rx8rl\lib\common\parse_pe.py
C:\tmp228rx8rl\lib\common\rand.py
C:\tmp228rx8rl\lib\common\registry.py
C:\tmp228rx8rl\lib\common\results.py
C:\tmp228rx8rl\lib\common\zip_utils.py
C:\tmp228rx8rl\lib\common\__init__.py
C:\tmp228rx8rl\lib\common\__pycache__
C:\tmp228rx8rl\lib\common\__pycache__\readme.txt
C:\tmp228rx8rl\lib\core\*
C:\tmp228rx8rl\lib\core\compound.py
C:\tmp228rx8rl\lib\core\config.py
C:\tmp228rx8rl\lib\core\log.py
C:\tmp228rx8rl\lib\core\packages.py
C:\tmp228rx8rl\lib\core\pipe.py
C:\tmp228rx8rl\lib\core\privileges.py
C:\tmp228rx8rl\lib\core\startup.py
C:\tmp228rx8rl\lib\core\__pycache__
C:\tmp228rx8rl\lib\core\__pycache__\readme.txt
C:\tmp228rx8rl\lib\__pycache__\*
C:\tmp228rx8rl\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\*
C:\tmp228rx8rl\modules\auxiliary\amsi.py
C:\tmp228rx8rl\modules\auxiliary\amsi_collector.py
C:\tmp228rx8rl\modules\auxiliary\autoruns.py
C:\tmp228rx8rl\modules\auxiliary\curtain.py
C:\tmp228rx8rl\modules\auxiliary\digisig.py
C:\tmp228rx8rl\modules\auxiliary\disguise.py
C:\tmp228rx8rl\modules\auxiliary\during_script.py
C:\tmp228rx8rl\modules\auxiliary\evtx.py
C:\tmp228rx8rl\modules\auxiliary\filepickup.py
C:\tmp228rx8rl\modules\auxiliary\html_scraper.py
C:\tmp228rx8rl\modules\auxiliary\human.py
C:\tmp228rx8rl\modules\auxiliary\permissions.py
C:\tmp228rx8rl\modules\auxiliary\pre_script.py
C:\tmp228rx8rl\modules\auxiliary\procmon.py
C:\tmp228rx8rl\modules\auxiliary\recentfiles.py
C:\tmp228rx8rl\modules\auxiliary\screenshots.py
C:\tmp228rx8rl\modules\auxiliary\sysmon.py
C:\tmp228rx8rl\modules\auxiliary\tlsdump.py
C:\tmp228rx8rl\modules\auxiliary\usage.py
C:\tmp228rx8rl\modules\auxiliary\__init__.py
C:\tmp228rx8rl\modules\auxiliary\__pycache__
C:\tmp228rx8rl\modules\auxiliary\__pycache__\readme.txt
C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.basta
C:\tmp228rx8rl\data\yara\RisePro.yar.basta
C:\tmp228rx8rl\data\yara\SingleStepAntiHook.yar.basta
C:\ProgramData\Microsoft\User Account Pictures\user.bmp.basta
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.basta
C:\tmp228rx8rl\data\yara\Syscall.yar
C:\tmp228rx8rl\data\yara\Stealc.yar.basta
C:\tmp228rx8rl\data\yara\Socks5Systemz.yar.basta
C:\tmp228rx8rl\data\yara\Syscall.yar.basta
C:\tmp228rx8rl\data\yara\XWorm.yar
C:\tmp228rx8rl\data\yara\UrsnifV3.yar.basta
C:\tmp228rx8rl\data\yara\Zloader.yar.basta
C:\tmp228rx8rl\modules\packages\access.py
C:\tmp228rx8rl\modules\packages\applet.py
C:\tmp228rx8rl\modules\packages\archive.py
C:\tmp228rx8rl\modules\packages\autoit.py
C:\tmp228rx8rl\lib\common\parse_pe.py.basta
C:\tmp228rx8rl\lib\common\errors.py.basta
C:\tmp228rx8rl\modules\packages\chrome.py
C:\tmp228rx8rl\modules\packages\chromium.py
C:\tmp228rx8rl\modules\packages\cpl.py
C:\tmp228rx8rl\modules\packages\dll.py
C:\tmp228rx8rl\modules\packages\doc.py
C:\tmp228rx8rl\modules\packages\doc2016.py
C:\tmp228rx8rl\lib\common\zip_utils.py.basta
C:\tmp228rx8rl\modules\packages\ichitaro.py
C:\tmp228rx8rl\modules\packages\ie.py
C:\tmp228rx8rl\modules\packages\inf.py
C:\tmp228rx8rl\modules\packages\inp.py
C:\tmp228rx8rl\modules\packages\nsis.py
C:\tmp228rx8rl\modules\packages\ollydbg.py
C:\tmp228rx8rl\modules\packages\one.py
C:\tmp228rx8rl\modules\packages\Unpacker_js.py
C:\tmp228rx8rl\modules\packages\Unpacker_ps1.py
C:\tmp228rx8rl\modules\packages\Unpacker_regsvr.py
C:\tmp228rx8rl\modules\packages\Unpacker_zip.py
C:\tmp228rx8rl\modules\packages\vawtrak.py
C:\tmp228rx8rl\modules\packages\vbejse.py
C:\tmp228rx8rl\modules\packages\vbs.py
C:\tmp228rx8rl\modules\packages\wsf.py
C:\tmp228rx8rl\modules\packages\xls.py
C:\tmp228rx8rl\modules\packages\xls2016.py
C:\tmp228rx8rl\modules\packages\xps.py
C:\tmp228rx8rl\modules\packages\xslt.py
C:\tmp228rx8rl\modules\packages\zip.py
C:\tmp228rx8rl\modules\packages\zip_compound.py
C:\tmp228rx8rl\modules\packages\__init__.py
C:\tmp228rx8rl\modules\packages\__pycache__
C:\tmp228rx8rl\lib\core\privileges.py.basta
C:\tmp228rx8rl\lib\core\packages.py.basta
C:\tmp228rx8rl\modules\packages\__pycache__\readme.txt
C:\tmp228rx8rl\lib\core\pipe.py.basta
C:\tmp228rx8rl\lib\core\__init__.py
C:\tmp228rx8rl\modules\auxiliary\amsi_collector.py.basta
C:\tmp228rx8rl\modules\auxiliary\browser.py
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi.basta
C:\tmp228rx8rl\modules\auxiliary\disguise.py.basta
C:\tmp228rx8rl\modules\auxiliary\html_scraper.py.basta
C:\tmp228rx8rl\modules\auxiliary\recentfiles.py.basta
C:\tmp228rx8rl\modules\auxiliary\human.py.basta
C:\tmp228rx8rl\modules\auxiliary\screenshots.py.basta
C:\tmp228rx8rl\modules\auxiliary\pre_script.py.basta
C:\tmp228rx8rl\modules\packages\access.py.basta
C:\tmp228rx8rl\modules\packages\applet.py.basta
C:\tmp228rx8rl\modules\packages\chrome.py.basta
C:\tmp228rx8rl\modules\packages\doc_antivm.py
C:\tmp228rx8rl\modules\packages\doc.py.basta
C:\tmp228rx8rl\modules\packages\firefox.py
C:\tmp228rx8rl\modules\packages\eml.py
C:\tmp228rx8rl\modules\packages\eml.py.basta
C:\tmp228rx8rl\modules\packages\generic.py
C:\tmp228rx8rl\modules\packages\exe.py
C:\tmp228rx8rl\modules\packages\exe.py.basta
C:\tmp228rx8rl\modules\packages\hta.py
C:\tmp228rx8rl\modules\auxiliary\__init__.py.basta
C:\tmp228rx8rl\modules\packages\hwp.py
C:\tmp228rx8rl\modules\packages\doc2016.py.basta
C:\tmp228rx8rl\modules\packages\firefox.py.basta
C:\tmp228rx8rl\modules\packages\hta.py.basta
C:\tmp228rx8rl\modules\packages\jar.py
C:\tmp228rx8rl\modules\packages\js_antivm.py
C:\tmp228rx8rl\modules\packages\js.py
C:\tmp228rx8rl\modules\packages\js.py.basta
C:\tmp228rx8rl\modules\packages\inp.py.basta
C:\tmp228rx8rl\modules\packages\lnk.py
C:\tmp228rx8rl\modules\packages\msbuild.py
C:\tmp3bs9izg4\data\yara\MysterySnail.yar
C:\tmp3bs9izg4\data\yara\NSIS.yar
C:\tmp3bs9izg4\data\yara\Pafish.yar
C:\tmp3bs9izg4\data\yara\Pikabot.yar
C:\tmp3bs9izg4\data\yara\QakBot.yar
C:\tmp3bs9izg4\data\yara\RdtscpAntiVM.yar
C:\tmp3bs9izg4\data\yara\Rhadamanthys.yar
C:\tmp3bs9izg4\data\yara\RisePro.yar
C:\tmp3bs9izg4\data\yara\SingleStepAntiHook.yar
C:\tmp3bs9izg4\data\yara\SmokeLoader.yar
C:\tmp3bs9izg4\data\yara\Socks5Systemz.yar
C:\tmp3bs9izg4\data\yara\Stealc.yar
C:\tmp3bs9izg4\data\yara\Syscall.yar
C:\tmp3bs9izg4\data\yara\UPX.yar
C:\tmp3bs9izg4\data\yara\UrsnifV3.yar
C:\tmp3bs9izg4\data\yara\VBCrypter.yar
C:\tmp3bs9izg4\data\yara\XWorm.yar
C:\tmp3bs9izg4\data\yara\Zloader.yar
C:\tmp228rx8rl\modules\packages\msi.py
C:\tmp228rx8rl\modules\packages\msix.py
C:\tmp228rx8rl\modules\packages\msix.py.basta
C:\tmp228rx8rl\modules\packages\pdf.py
C:\tmp228rx8rl\modules\packages\nsis.py.basta
C:\tmp228rx8rl\modules\packages\ppt.py
C:\tmp228rx8rl\modules\packages\ppt.py.basta
C:\tmp228rx8rl\modules\packages\one.py.basta
C:\tmp228rx8rl\modules\packages\ppt2016.py
C:\tmp228rx8rl\modules\packages\ps1.py
C:\tmp228rx8rl\modules\packages\pub.py
C:\tmp228rx8rl\modules\packages\python.py
C:\tmp228rx8rl\modules\packages\rar.py
C:\tmp228rx8rl\modules\packages\rar.py.basta
C:\tmp228rx8rl\modules\packages\python.py.basta
C:\tmp228rx8rl\modules\packages\regsvr.py
C:\tmp228rx8rl\modules\packages\sct.py
C:\tmp228rx8rl\modules\packages\service.py
C:\tmp228rx8rl\modules\packages\regsvr.py.basta
C:\tmp228rx8rl\modules\packages\Shellcode.py
C:\tmp228rx8rl\modules\packages\Shellcode-Unpacker.py
C:\tmp228rx8rl\modules\packages\Shellcode-Unpacker.py.basta
C:\tmp228rx8rl\modules\packages\Shellcode_x64.py
C:\tmp228rx8rl\modules\packages\swf.py
C:\tmp228rx8rl\modules\packages\Unpacker.py
C:\tmp228rx8rl\modules\packages\Unpacker_dll.py
C:\tmp228rx8rl\modules\packages\swf.py.basta
C:\tmp228rx8rl\modules\packages\Unpacker.py.basta
C:\tmp228rx8rl\modules\packages\xls.py.basta
C:\tmp228rx8rl\modules\packages\xls2016.py.basta
C:\tmp228rx8rl\modules\packages\xps.py.basta
C:\tmp228rx8rl\modules\packages\xslt.py.basta
C:\tmp228rx8rl\modules\packages\zip.py.basta
C:\tmp228rx8rl\modules\packages\zip_compound.py.basta
C:\tmp228rx8rl\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\api
C:\tmp228rx8rl\modules\packages\__init__.py.basta
C:\tmp3bs9izg4\data\yara\AgentTesla.yar
C:\tmp3bs9izg4\lib\api\__init__.py
C:\tmp228rx8rl\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\api\__pycache__\readme.txt
C:\tmp3bs9izg4\data\yara\Al-khaser.yar
C:\tmp3bs9izg4\data\yara\AgentTesla.yar.basta
C:\tmp3bs9izg4\data\yara\AntiCuckoo.yar
C:\tmp3bs9izg4\data\yara\AntiCuckoo.yar.basta
C:\tmp3bs9izg4\data\yara\Blister.yar
C:\tmp3bs9izg4\data\yara\Al-khaser.yar.basta
C:\tmp3bs9izg4\data\yara\BuerLoader.yar
C:\tmp3bs9izg4\data\yara\BumbleBee.yar
C:\tmp3bs9izg4\data\yara\BumbleBee.yar.basta
C:\tmp3bs9izg4\data\yara\capemon.yac
C:\tmp3bs9izg4\data\yara\capemon.yac.basta
C:\tmp3bs9izg4\data\yara\CargoBayLoader.yar
C:\tmp3bs9izg4\data\yara\BuerLoader.yar.basta
C:\tmp3bs9izg4\data\yara\DarkGate.yar
C:\tmp3bs9izg4\data\yara\DarkGate.yar.basta
C:\tmp3bs9izg4\data\yara\DarkGateLoader.yar
C:\tmp3bs9izg4\data\yara\EmotetPacker.yar
C:\tmp3bs9izg4\data\yara\EmotetPacker.yar.basta
C:\tmp3bs9izg4\data\yara\Formbook.yar
C:\tmp3bs9izg4\data\yara\Formbook.yar.basta
C:\tmp3bs9izg4\data\yara\GetTickCountAntiVM.yar
C:\tmp228rx8rl\modules\packages\js_antivm.py.basta
C:\tmp3bs9izg4\data\yara\IcedID.yar
C:\tmp228rx8rl\modules\packages\Unpacker_ps1.py.basta
C:\tmp3bs9izg4\data\yara\Latrodectus.yar
C:\tmp3bs9izg4\data\yara\IcedID.yar.basta
C:\tmp3bs9izg4\data\yara\Lumma.yar
C:\tmp228rx8rl\modules\packages\wsf.py.basta
C:\tmp3bs9izg4\data\yara\ModiLoader.yar
C:\tmp3bs9izg4\data\yara\Latrodectus.yar.basta
C:\tmp3bs9izg4\data\yara\Lumma.yar.basta
C:\tmp3bs9izg4\data\yara\MysterySnail.yar.basta
C:\tmp3bs9izg4\lib\__pycache__\*
C:\tmp3bs9izg4\modules\auxiliary\amsi.py
C:\tmp3bs9izg4\modules\auxiliary\amsi_collector.py
C:\tmp3bs9izg4\modules\auxiliary\autoruns.py
C:\tmp3bs9izg4\modules\auxiliary\browser.py
C:\tmp3bs9izg4\modules\auxiliary\curtain.py
C:\tmp3bs9izg4\modules\auxiliary\digisig.py
C:\tmp3bs9izg4\modules\auxiliary\disguise.py
C:\tmp3bs9izg4\modules\auxiliary\during_script.py
C:\tmp3bs9izg4\modules\auxiliary\evtx.py
C:\tmp3bs9izg4\data\yara\Pikabot.yar.basta
C:\tmp3bs9izg4\modules\auxiliary\html_scraper.py
C:\tmp3bs9izg4\modules\auxiliary\human.py
C:\tmp3bs9izg4\modules\auxiliary\permissions.py
C:\tmp3bs9izg4\modules\auxiliary\pre_script.py
C:\tmp3bs9izg4\modules\auxiliary\procmon.py
C:\tmp3bs9izg4\modules\auxiliary\recentfiles.py
C:\tmp3bs9izg4\modules\auxiliary\screenshots.py
C:\tmp3bs9izg4\modules\auxiliary\sysmon.py
C:\tmp3bs9izg4\modules\auxiliary\tlsdump.py
C:\tmp3bs9izg4\modules\auxiliary\usage.py
C:\tmp3bs9izg4\modules\auxiliary\__init__.py
C:\tmp3bs9izg4\modules\auxiliary\__pycache__
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\readme.txt
C:\tmp3bs9izg4\data\yara\RdtscpAntiVM.yar.basta
C:\tmp3bs9izg4\data\yara\Rhadamanthys.yar.basta
C:\tmp3bs9izg4\data\yara\HeavensSyscall.yar
C:\tmp3bs9izg4\data\yara\HeavensSyscall.yar.basta
C:\tmp3bs9izg4\lib\core\pipe.py
C:\tmp3bs9izg4\data\yara\NSIS.yar.basta
C:\tmp3bs9izg4\lib\core\privileges.py
C:\tmp228rx8rl\modules\packages\Unpacker_zip.py.basta
C:\tmp3bs9izg4\lib\core\startup.py
C:\tmp3bs9izg4\lib\core\packages.py
C:\tmp3bs9izg4\lib\core\packages.py.basta
C:\tmp3bs9izg4\lib\core\__init__.py
C:\tmp3bs9izg4\lib\core\privileges.py.basta
C:\tmp3bs9izg4\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__init__.py.basta
C:\tmp3bs9izg4\modules\auxiliary\amsi_collector.py.basta
C:\tmp3bs9izg4\modules\auxiliary\autoruns.py.basta
C:\tmp3bs9izg4\modules\auxiliary\browser.py.basta
C:\tmp3bs9izg4\modules\auxiliary\curtain.py.basta
C:\tmp3bs9izg4\modules\auxiliary\digisig.py.basta
C:\tmp3bs9izg4\modules\auxiliary\during_script.py.basta
C:\tmp3bs9izg4\modules\auxiliary\disguise.py.basta
C:\tmp3bs9izg4\modules\auxiliary\filepickup.py
C:\tmp3bs9izg4\modules\auxiliary\filepickup.py.basta
C:\tmp3bs9izg4\modules\auxiliary\evtx.py.basta
C:\tmp3bs9izg4\modules\auxiliary\html_scraper.py.basta
C:\tmp3bs9izg4\modules\auxiliary\permissions.py.basta
C:\tmp3bs9izg4\modules\auxiliary\pre_script.py.basta
C:\tmp3bs9izg4\modules\auxiliary\amsi.py.basta
C:\tmp3bs9izg4\modules\auxiliary\procmon.py.basta
C:\tmp3bs9izg4\modules\auxiliary\recentfiles.py.basta
C:\tmp3bs9izg4\modules\auxiliary\human.py.basta
C:\tmp3bs9izg4\modules\auxiliary\__init__.py.basta
C:\tmp3bs9izg4\modules\packages\access.py
C:\tmp3bs9izg4\modules\packages\access.py.basta
C:\tmp3bs9izg4\modules\packages\applet.py
C:\tmp3bs9izg4\modules\auxiliary\tlsdump.py.basta
C:\tmp3bs9izg4\modules\packages\archive.py
C:\tmp3bs9izg4\modules\auxiliary\usage.py.basta
C:\tmp3bs9izg4\modules\packages\autoit.py
C:\tmp3bs9izg4\modules\packages\applet.py.basta
C:\tmp3bs9izg4\modules\packages\archive.py.basta
C:\tmp3bs9izg4\modules\packages\chm.py
C:\tmp3bs9izg4\modules\packages\chrome.py
C:\tmp3bs9izg4\data\yara\Pafish.yar.basta
C:\tmp3bs9izg4\modules\packages\chromium.py
C:\tmp3bs9izg4\lib\core\pipe.py.basta
C:\tmp3bs9izg4\modules\packages\dll.py
C:\tmp3bs9izg4\modules\packages\autoit.py.basta
C:\tmp3bs9izg4\modules\packages\doc.py
C:\tmp3bs9izg4\modules\packages\doc.py.basta
C:\tmp3bs9izg4\modules\packages\doc2016.py
C:\tmp3bs9izg4\modules\packages\doc2016.py.basta
C:\tmp3bs9izg4\modules\packages\doc_antivm.py
C:\tmp3bs9izg4\modules\packages\doc_antivm.py.basta
C:\tmp3bs9izg4\modules\packages\edge.py
C:\tmp3bs9izg4\modules\packages\edge.py.basta
C:\tmp3bs9izg4\modules\packages\eml.py
C:\tmp3bs9izg4\modules\packages\eml.py.basta
C:\tmp3bs9izg4\modules\packages\exe.py
C:\tmp3bs9izg4\modules\packages\exe.py.basta
C:\tmp3bs9izg4\modules\packages\firefox.py
C:\tmp3bs9izg4\modules\packages\firefox.py.basta
C:\tmp3bs9izg4\modules\packages\generic.py
C:\tmp3bs9izg4\modules\packages\generic.py.basta
C:\tmp3bs9izg4\modules\packages\hta.py
C:\tmp3bs9izg4\modules\packages\hta.py.basta
C:\tmp3bs9izg4\modules\packages\hwp.py
C:\tmp3bs9izg4\modules\packages\hwp.py.basta
C:\tmp3bs9izg4\modules\packages\ichitaro.py
C:\tmp3bs9izg4\modules\packages\ichitaro.py.basta
C:\tmp3bs9izg4\modules\packages\ie.py
C:\tmp3bs9izg4\modules\packages\ie.py.basta
C:\tmp3bs9izg4\modules\packages\inf.py
C:\tmp3bs9izg4\modules\packages\inf.py.basta
C:\tmp3bs9izg4\modules\packages\inp.py
C:\tmp3bs9izg4\modules\packages\inp.py.basta
C:\tmp3bs9izg4\modules\packages\jar.py
C:\tmp3bs9izg4\modules\packages\jar.py.basta
C:\tmp3bs9izg4\modules\packages\js.py
C:\tmp3bs9izg4\modules\packages\js.py.basta
C:\tmp3bs9izg4\modules\packages\js_antivm.py
C:\tmp3bs9izg4\modules\packages\js_antivm.py.basta
C:\tmp3bs9izg4\modules\packages\lnk.py
C:\tmp3bs9izg4\modules\packages\lnk.py.basta
C:\tmp3bs9izg4\modules\packages\mht.py
C:\tmp3bs9izg4\modules\packages\mht.py.basta
C:\tmp3bs9izg4\modules\packages\msbuild.py
C:\tmp3bs9izg4\modules\packages\msbuild.py.basta
C:\tmp3bs9izg4\modules\packages\msg.py
C:\tmp3bs9izg4\modules\packages\msg.py.basta
C:\tmp3bs9izg4\modules\packages\msi.py
C:\tmp3bs9izg4\modules\__pycache__\*
C:\tmp3bs9izg4\tests\lib\*
C:\tmp3bs9izg4\tests\lib\api\readme.txt
C:\tmp3bs9izg4\tests\lib\common\readme.txt
C:\tmp3bs9izg4\tests\modules\*
C:\tmp3bs9izg4\tests\modules\packages\readme.txt
C:\tmp3bs9izg4\modules\packages\msi.py.basta
C:\tmp3bs9izg4\modules\packages\msix.py
C:\tmp3ljmycja\data\yara\*
C:\tmp3bs9izg4\modules\packages\msix.py.basta
C:\tmp3bs9izg4\modules\packages\nsis.py
C:\tmp3bs9izg4\modules\packages\nsis.py.basta
C:\tmp3bs9izg4\modules\packages\ollydbg.py
C:\tmp3bs9izg4\modules\packages\ollydbg.py.basta
C:\tmp3bs9izg4\modules\packages\one.py
C:\tmp3bs9izg4\modules\packages\one.py.basta
C:\tmp3bs9izg4\modules\packages\pdf.py
C:\tmp3bs9izg4\modules\packages\pdf.py.basta
C:\tmp3bs9izg4\modules\packages\ppt.py
C:\tmp3bs9izg4\modules\packages\ppt.py.basta
C:\tmp3bs9izg4\modules\packages\ppt2016.py
C:\tmp3bs9izg4\modules\packages\ppt2016.py.basta
C:\tmp3bs9izg4\modules\packages\ps1.py
C:\tmp3bs9izg4\modules\packages\ps1.py.basta
C:\tmp3bs9izg4\modules\packages\pub.py
C:\tmp3bs9izg4\modules\packages\pub.py.basta
C:\tmp3bs9izg4\modules\packages\pub2016.py
C:\tmp3bs9izg4\modules\packages\pub2016.py.basta
C:\tmp3bs9izg4\modules\packages\python.py
C:\tmp3bs9izg4\modules\packages\rar.py
C:\tmp3bs9izg4\modules\packages\rar.py.basta
C:\tmp3bs9izg4\modules\packages\reg.py
C:\tmp3bs9izg4\modules\packages\reg.py.basta
C:\tmp3bs9izg4\modules\packages\regsvr.py
C:\tmp3bs9izg4\modules\packages\regsvr.py.basta
C:\tmp3bs9izg4\modules\packages\sct.py
C:\tmp3bs9izg4\modules\packages\sct.py.basta
C:\tmp3bs9izg4\modules\packages\service.py
C:\tmp3bs9izg4\modules\packages\cpl.py
C:\tmp3bs9izg4\modules\packages\cpl.py.basta
C:\tmp3bs9izg4\modules\packages\service_dll.py
C:\tmp3bs9izg4\modules\packages\dll.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode-Unpacker.py
C:\tmp3bs9izg4\modules\packages\Shellcode-Unpacker.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode.py
C:\tmp3bs9izg4\modules\packages\Shellcode.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode_x64.py
C:\tmp3bs9izg4\modules\packages\Shellcode_x64.py.basta
C:\tmp3bs9izg4\modules\packages\swf.py
C:\tmp3bs9izg4\modules\packages\swf.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker.py
C:\tmp3bs9izg4\modules\packages\Unpacker.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_dll.py
C:\tmp3bs9izg4\modules\packages\Unpacker_dll.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_js.py
C:\tmp3bs9izg4\modules\packages\Unpacker_js.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_ps1.py
C:\tmp3bs9izg4\modules\packages\Unpacker_ps1.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_regsvr.py
C:\tmp3bs9izg4\modules\packages\Unpacker_regsvr.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_zip.py
C:\tmp3bs9izg4\modules\packages\Unpacker_zip.py.basta
C:\tmp3bs9izg4\modules\packages\vawtrak.py
C:\tmp3bs9izg4\modules\packages\vawtrak.py.basta
C:\tmp3bs9izg4\modules\packages\vbejse.py
C:\tmp3bs9izg4\modules\packages\vbejse.py.basta
C:\tmp3bs9izg4\modules\packages\vbs.py
C:\tmp3bs9izg4\modules\packages\vbs.py.basta
C:\tmp3bs9izg4\modules\packages\wsf.py
C:\tmp3bs9izg4\modules\packages\wsf.py.basta
C:\tmp3bs9izg4\modules\packages\xls.py
C:\tmp3bs9izg4\modules\packages\xls.py.basta
C:\tmp3bs9izg4\modules\packages\xls2016.py
C:\tmp3bs9izg4\modules\packages\xls2016.py.basta
C:\tmp3bs9izg4\modules\packages\xps.py
C:\tmp3bs9izg4\modules\packages\xps.py.basta
C:\tmp3bs9izg4\modules\packages\xslt.py
C:\tmp3bs9izg4\modules\packages\xslt.py.basta
C:\tmp3bs9izg4\modules\packages\zip.py
C:\tmp3bs9izg4\modules\packages\zip.py.basta
C:\tmp3bs9izg4\modules\packages\zip_compound.py
C:\tmp3bs9izg4\modules\packages\zip_compound.py.basta
C:\tmp3bs9izg4\modules\packages\__init__.py
C:\tmp3bs9izg4\modules\packages\__init__.py.basta
C:\tmp3bs9izg4\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\api\*
C:\tmp3bs9izg4\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\api\__pycache__\readme.txt
C:\tmp3ljmycja\data\yara\AgentTesla.yar
C:\tmp3ljmycja\data\yara\AgentTesla.yar.basta
C:\tmp3ljmycja\data\yara\Al-khaser.yar
C:\tmp3ljmycja\data\yara\Al-khaser.yar.basta
C:\tmp3ljmycja\data\yara\AntiCuckoo.yar
C:\tmp3ljmycja\data\yara\AntiCuckoo.yar.basta
C:\tmp3ljmycja\data\yara\Blister.yar
C:\tmp3ljmycja\data\yara\Blister.yar.basta
C:\tmp3ljmycja\data\yara\BuerLoader.yar
C:\tmp3ljmycja\lib\common\*
C:\tmp3ljmycja\data\yara\BuerLoader.yar.basta
C:\tmp3ljmycja\lib\common\__pycache__\readme.txt
C:\tmp3ljmycja\data\yara\BumbleBee.yar
C:\tmp3ljmycja\data\yara\BumbleBee.yar.basta
C:\tmp3ljmycja\data\yara\CargoBayLoader.yar
C:\tmp3ljmycja\data\yara\CargoBayLoader.yar.basta
C:\tmp3ljmycja\data\yara\DarkGate.yar
C:\tmp3ljmycja\data\yara\DarkGate.yar.basta
C:\tmp3ljmycja\data\yara\DarkGateLoader.yar
C:\tmp3ljmycja\data\yara\DarkGateLoader.yar.basta
C:\tmp3ljmycja\data\yara\DoomedLoader.yar
C:\tmp3ljmycja\data\yara\DoomedLoader.yar.basta
C:\tmp3ljmycja\data\yara\DridexLoader.yar
C:\tmp3ljmycja\data\yara\DridexLoader.yar.basta
C:\tmp3ljmycja\data\yara\EmotetPacker.yar
C:\tmp3ljmycja\data\yara\EmotetPacker.yar.basta
C:\tmp3ljmycja\data\yara\Formbook.yar
C:\tmp3ljmycja\data\yara\Formbook.yar.basta
C:\tmp3ljmycja\data\yara\GetTickCountAntiVM.yar
C:\tmp3ljmycja\data\yara\GetTickCountAntiVM.yar.basta
C:\tmp3ljmycja\data\yara\Guloader.yar
C:\tmp3ljmycja\data\yara\Guloader.yar.basta
C:\tmp3ljmycja\data\yara\HeavensSyscall.yar
C:\tmp3ljmycja\data\yara\HeavensSyscall.yar.basta
C:\tmp3ljmycja\data\yara\IcedID.yar
C:\tmp3ljmycja\lib\core\*
C:\tmp3ljmycja\data\yara\IcedID.yar.basta
C:\tmp3ljmycja\lib\core\__pycache__\readme.txt
C:\tmp3ljmycja\data\yara\Latrodectus.yar
C:\tmp3ljmycja\data\yara\Latrodectus.yar.basta
C:\tmp3ljmycja\data\yara\Lumma.yar
C:\tmp3ljmycja\data\yara\Lumma.yar.basta
C:\tmp3ljmycja\data\yara\ModiLoader.yar
C:\tmp3ljmycja\data\yara\ModiLoader.yar.basta
C:\tmp3ljmycja\data\yara\MysterySnail.yar
C:\tmp3ljmycja\data\yara\MysterySnail.yar.basta
C:\tmp3ljmycja\data\yara\NSIS.yar
C:\tmp3ljmycja\data\yara\NSIS.yar.basta
C:\tmp3ljmycja\data\yara\Pafish.yar
C:\tmp3ljmycja\data\yara\Pafish.yar.basta
C:\tmp3ljmycja\data\yara\Pikabot.yar
C:\tmp3ljmycja\data\yara\Pikabot.yar.basta
C:\tmp3ljmycja\data\yara\QakBot.yar
C:\tmp3ljmycja\data\yara\QakBot.yar.basta
C:\tmp3ljmycja\data\yara\RdtscpAntiVM.yar
C:\tmp3ljmycja\data\yara\RdtscpAntiVM.yar.basta
C:\tmp3ljmycja\data\yara\Rhadamanthys.yar
C:\tmp3ljmycja\lib\__pycache__\*
C:\tmp3ljmycja\modules\auxiliary\*
C:\tmp3ljmycja\data\yara\Rhadamanthys.yar.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\readme.txt
C:\tmp3ljmycja\data\yara\RisePro.yar
C:\tmp3ljmycja\data\yara\RisePro.yar.basta
C:\tmp3ljmycja\data\yara\SingleStepAntiHook.yar
C:\tmp3ljmycja\data\yara\SingleStepAntiHook.yar.basta
C:\tmp3ljmycja\data\yara\SmokeLoader.yar
C:\tmp3ljmycja\data\yara\SmokeLoader.yar.basta
C:\tmp3ljmycja\data\yara\Socks5Systemz.yar
C:\tmp3ljmycja\data\yara\Socks5Systemz.yar.basta
C:\tmp3ljmycja\data\yara\Stealc.yar
C:\tmp3ljmycja\data\yara\Stealc.yar.basta
C:\tmp3ljmycja\data\yara\Syscall.yar
C:\tmp3bs9izg4\modules\packages\service_dll.py.basta
C:\tmp3ljmycja\data\yara\UPX.yar
C:\tmp3ljmycja\data\yara\Syscall.yar.basta
C:\tmp3ljmycja\data\yara\UPX.yar.basta
C:\tmp3ljmycja\data\yara\VBCrypter.yar
C:\tmp3ljmycja\data\yara\VBCrypter.yar.basta
C:\tmp3ljmycja\data\yara\XWorm.yar
C:\tmp3ljmycja\data\yara\XWorm.yar.basta
C:\tmp3ljmycja\data\yara\Zloader.yar
C:\tmp3ljmycja\data\yara\Zloader.yar.basta
C:\tmp3ljmycja\lib\api\process.py
C:\tmp3ljmycja\data\yara\UrsnifV3.yar
C:\tmp3ljmycja\data\yara\UrsnifV3.yar.basta
C:\tmp3ljmycja\lib\api\screenshot.py
C:\tmp3ljmycja\lib\api\process.py.basta
C:\tmp3ljmycja\lib\api\utils.py
C:\tmp3ljmycja\lib\api\utils.py.basta
C:\tmp3ljmycja\lib\api\__init__.py
C:\tmp3ljmycja\lib\api\__init__.py.basta
C:\tmp3ljmycja\lib\common\abstracts.py
C:\tmp3ljmycja\lib\common\abstracts.py.basta
C:\tmp3ljmycja\lib\common\common.py
C:\tmp3ljmycja\lib\common\common.py.basta
C:\tmp3ljmycja\lib\common\constants.py
C:\tmp3ljmycja\lib\common\constants.py.basta
C:\tmp3ljmycja\lib\common\defines.py
C:\tmp3ljmycja\lib\common\defines.py.basta
C:\tmp3ljmycja\lib\common\errors.py
C:\tmp3ljmycja\modules\packages\*
C:\tmp3ljmycja\modules\packages\__pycache__\readme.txt
C:\tmp3ljmycja\lib\api\screenshot.py.basta
C:\tmp3ljmycja\lib\common\exceptions.py
C:\tmp3ljmycja\lib\common\exceptions.py.basta
C:\tmp3ljmycja\lib\common\hashing.py
C:\tmp3ljmycja\lib\common\hashing.py.basta
C:\tmp3ljmycja\lib\common\parse_pe.py
C:\tmp3ljmycja\lib\common\errors.py.basta
C:\tmp3ljmycja\lib\common\parse_pe.py.basta
C:\tmp3ljmycja\lib\common\registry.py
C:\tmp3ljmycja\lib\common\rand.py
C:\tmp3ljmycja\lib\common\rand.py.basta
C:\tmp3ljmycja\lib\common\results.py
C:\tmp3ljmycja\lib\common\registry.py.basta
C:\tmp3ljmycja\lib\common\zip_utils.py
C:\tmp3ljmycja\lib\common\results.py.basta
C:\tmp3ljmycja\lib\common\__init__.py
C:\tmp3ljmycja\lib\common\__init__.py.basta
C:\tmp3ljmycja\lib\core\compound.py
C:\tmp3ljmycja\lib\common\zip_utils.py.basta
C:\tmp3ljmycja\lib\core\config.py
C:\tmp3ljmycja\lib\core\compound.py.basta
C:\tmp3ljmycja\lib\core\log.py
C:\tmp3ljmycja\lib\core\config.py.basta
C:\tmp3ljmycja\lib\core\packages.py
C:\tmp3ljmycja\lib\core\log.py.basta
C:\tmp3ljmycja\lib\core\pipe.py
C:\tmp3ljmycja\lib\core\privileges.py
C:\tmp3ljmycja\lib\core\privileges.py.basta
C:\tmp3ljmycja\lib\core\startup.py
C:\tmp3ljmycja\lib\core\pipe.py.basta
C:\tmp3ljmycja\lib\core\__init__.py
C:\tmp3ljmycja\lib\core\startup.py.basta
C:\tmp3ljmycja\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__init__.py.basta
C:\tmp3ljmycja\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\amsi.py
C:\tmp3ljmycja\modules\auxiliary\amsi_collector.py
C:\tmp3ljmycja\modules\auxiliary\amsi_collector.py.basta
C:\tmp3ljmycja\modules\auxiliary\autoruns.py
C:\tmp3ljmycja\modules\auxiliary\autoruns.py.basta
C:\tmp3ljmycja\modules\auxiliary\browser.py
C:\tmp3ljmycja\modules\auxiliary\browser.py.basta
C:\tmp3ljmycja\modules\auxiliary\curtain.py
C:\tmp3ljmycja\modules\auxiliary\curtain.py.basta
C:\tmp3ljmycja\modules\auxiliary\digisig.py
C:\tmp3ljmycja\modules\auxiliary\amsi.py.basta
C:\tmp3ljmycja\modules\auxiliary\disguise.py
C:\tmp3ljmycja\modules\auxiliary\digisig.py.basta
C:\tmp3ljmycja\modules\auxiliary\during_script.py
C:\tmp3ljmycja\modules\auxiliary\during_script.py.basta
C:\tmp3ljmycja\modules\auxiliary\evtx.py
C:\tmp3ljmycja\modules\auxiliary\disguise.py.basta
C:\tmp3ljmycja\modules\auxiliary\filepickup.py
C:\tmp3ljmycja\modules\auxiliary\filepickup.py.basta
C:\tmp3ljmycja\modules\auxiliary\html_scraper.py
C:\tmp3ljmycja\modules\auxiliary\html_scraper.py.basta
C:\tmp3ljmycja\modules\auxiliary\human.py
C:\tmp3ljmycja\modules\auxiliary\evtx.py.basta
C:\tmp3ljmycja\modules\auxiliary\permissions.py
C:\tmp3ljmycja\modules\auxiliary\permissions.py.basta
C:\tmp3ljmycja\modules\auxiliary\pre_script.py
C:\tmp3ljmycja\modules\auxiliary\human.py.basta
C:\tmp3ljmycja\modules\auxiliary\procmon.py
C:\tmp3ljmycja\modules\auxiliary\pre_script.py.basta
C:\tmp3ljmycja\modules\auxiliary\recentfiles.py
C:\tmp3ljmycja\modules\auxiliary\procmon.py.basta
C:\tmp3ljmycja\modules\auxiliary\screenshots.py
C:\tmp3ljmycja\modules\auxiliary\recentfiles.py.basta
C:\tmp3ljmycja\modules\auxiliary\sysmon.py
C:\tmp3ljmycja\modules\auxiliary\screenshots.py.basta
C:\tmp3ljmycja\modules\auxiliary\tlsdump.py
C:\tmp3ljmycja\modules\auxiliary\sysmon.py.basta
C:\tmp3ljmycja\modules\auxiliary\usage.py
C:\tmp3ljmycja\modules\auxiliary\tlsdump.py.basta
C:\tmp3ljmycja\modules\auxiliary\__init__.py
C:\tmp3ljmycja\modules\auxiliary\__init__.py.basta
C:\tmp3ljmycja\modules\packages\access.py
C:\tmp3ljmycja\modules\auxiliary\usage.py.basta
C:\tmp3ljmycja\modules\packages\applet.py
C:\tmp3ljmycja\modules\packages\access.py.basta
C:\tmp3ljmycja\modules\packages\applet.py.basta
C:\tmp3ljmycja\modules\packages\archive.py
C:\tmp3ljmycja\modules\packages\autoit.py
C:\tmp3ljmycja\modules\packages\autoit.py.basta
C:\tmp3ljmycja\modules\packages\chm.py
C:\tmp3ljmycja\modules\packages\archive.py.basta
C:\tmp3ljmycja\modules\packages\chrome.py
C:\tmp3ljmycja\modules\packages\chm.py.basta
C:\tmp3ljmycja\modules\packages\chromium.py
C:\tmp3ljmycja\modules\packages\chrome.py.basta
C:\tmp3ljmycja\modules\packages\cpl.py
C:\tmp3ljmycja\modules\packages\chromium.py.basta
C:\tmp3ljmycja\modules\packages\dll.py
C:\tmp3ljmycja\modules\packages\cpl.py.basta
C:\tmp3ljmycja\modules\packages\doc.py
C:\tmp3ljmycja\modules\packages\doc.py.basta
C:\tmp3ljmycja\modules\packages\doc2016.py
C:\tmp3ljmycja\modules\packages\doc_antivm.py
C:\tmp3ljmycja\modules\packages\doc2016.py.basta
C:\tmp3ljmycja\modules\packages\edge.py
C:\tmp3ljmycja\modules\packages\doc_antivm.py.basta
C:\tmp3ljmycja\modules\packages\eml.py
C:\tmp3ljmycja\modules\packages\edge.py.basta
C:\tmp3ljmycja\modules\packages\exe.py
C:\tmp3ljmycja\modules\packages\firefox.py
C:\tmp3ljmycja\modules\packages\exe.py.basta
C:\tmp3bs9izg4\modules\packages\service.py.basta
C:\tmp3ljmycja\modules\packages\hta.py
C:\tmp3ljmycja\modules\packages\firefox.py.basta
C:\tmp3ljmycja\modules\packages\hwp.py
C:\tmp3ljmycja\modules\packages\hta.py.basta
C:\tmp3ljmycja\modules\packages\ichitaro.py
C:\tmp3ljmycja\modules\packages\inf.py
C:\tmp3ljmycja\modules\packages\inf.py.basta
C:\tmp3ljmycja\modules\packages\inp.py
C:\tmp3ljmycja\modules\packages\inp.py.basta
C:\tmp3ljmycja\modules\packages\jar.py
C:\tmp3ljmycja\modules\packages\jar.py.basta
C:\tmp3ljmycja\modules\packages\js.py
C:\tmp3ljmycja\modules\packages\js.py.basta
C:\tmp3ljmycja\modules\packages\js_antivm.py
C:\tmp3ljmycja\modules\packages\js_antivm.py.basta
C:\tmp3ljmycja\modules\packages\lnk.py
C:\tmp3ljmycja\modules\packages\lnk.py.basta
C:\tmp3ljmycja\modules\packages\mht.py
C:\tmp3ljmycja\modules\packages\mht.py.basta
C:\tmp3ljmycja\modules\packages\msbuild.py
C:\tmp3ljmycja\modules\packages\msbuild.py.basta
C:\tmp3ljmycja\modules\packages\msg.py
C:\tmp3ljmycja\modules\packages\generic.py
C:\tmp3ljmycja\modules\packages\generic.py.basta
C:\tmp3ljmycja\modules\packages\msi.py
C:\tmp3ljmycja\modules\packages\msg.py.basta
C:\tmp3ljmycja\modules\packages\msix.py
C:\tmp3ljmycja\modules\packages\msix.py.basta
C:\tmp3ljmycja\modules\packages\nsis.py
C:\tmp3ljmycja\modules\packages\hwp.py.basta
C:\tmp3ljmycja\modules\packages\ollydbg.py
C:\tmp3ljmycja\modules\__pycache__\*
C:\tmp3ljmycja\tests\lib\*
C:\tmp3ljmycja\tests\lib\api\readme.txt
C:\tmp3ljmycja\tests\lib\common\readme.txt
C:\tmp3ljmycja\tests\modules\*
C:\tmp3ljmycja\tests\modules\packages\readme.txt
C:\tmpb9ol310j\data\yara\*
C:\tmp3ljmycja\modules\packages\msi.py.basta
C:\tmp3ljmycja\modules\packages\one.py
C:\tmp3ljmycja\modules\packages\pdf.py
C:\tmp3ljmycja\modules\packages\one.py.basta
C:\tmp3ljmycja\modules\packages\ppt.py
C:\tmp3ljmycja\modules\packages\ppt2016.py
C:\tmp3ljmycja\modules\packages\pdf.py.basta
C:\tmp3ljmycja\modules\packages\pub.py
C:\tmp3ljmycja\modules\packages\ppt2016.py.basta
C:\tmp3ljmycja\modules\packages\pub2016.py
C:\tmp3ljmycja\modules\packages\ps1.py
C:\tmp3ljmycja\modules\packages\pub.py.basta
C:\tmp3ljmycja\modules\packages\pub2016.py.basta
C:\tmp3ljmycja\modules\packages\ps1.py.basta
C:\tmp3ljmycja\modules\packages\rar.py
C:\tmp3ljmycja\modules\packages\reg.py
C:\tmp3ljmycja\modules\packages\python.py
C:\tmp3ljmycja\modules\packages\python.py.basta
C:\tmp3ljmycja\modules\packages\regsvr.py
C:\tmp3ljmycja\modules\packages\reg.py.basta
C:\tmp3ljmycja\modules\packages\sct.py
C:\tmp3ljmycja\modules\packages\rar.py.basta
C:\tmp3ljmycja\modules\packages\service.py
C:\tmp3ljmycja\modules\packages\service_dll.py
C:\tmp3ljmycja\modules\packages\service.py.basta
C:\tmp3ljmycja\modules\packages\Shellcode-Unpacker.py
C:\tmp3ljmycja\modules\packages\sct.py.basta
C:\tmp3ljmycja\modules\packages\Shellcode.py
C:\tmp3ljmycja\modules\packages\service_dll.py.basta
C:\tmp3ljmycja\modules\packages\Shellcode_x64.py
C:\tmp3ljmycja\modules\packages\Shellcode.py.basta
C:\tmp3ljmycja\modules\packages\swf.py
C:\tmp3ljmycja\modules\packages\Unpacker.py
C:\tmp3ljmycja\modules\packages\Shellcode_x64.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_dll.py
C:\tmp3ljmycja\modules\packages\swf.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_js.py
C:\tmp3ljmycja\modules\packages\Unpacker.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_ps1.py
C:\tmp3ljmycja\modules\packages\Unpacker_dll.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_regsvr.py
C:\tmp3ljmycja\modules\packages\Unpacker_js.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_zip.py
C:\tmp3ljmycja\modules\packages\Unpacker_ps1.py.basta
C:\tmp3ljmycja\modules\packages\vawtrak.py
C:\tmp3ljmycja\modules\packages\Unpacker_regsvr.py.basta
C:\tmp3ljmycja\modules\packages\vbejse.py
C:\tmp3ljmycja\modules\packages\vawtrak.py.basta
C:\tmp3ljmycja\modules\packages\vbs.py
C:\tmp3ljmycja\modules\packages\wsf.py
C:\tmp3ljmycja\modules\packages\xls.py
C:\tmp3ljmycja\modules\packages\vbs.py.basta
C:\tmp3ljmycja\modules\packages\xls2016.py
C:\tmp3ljmycja\modules\packages\xls.py.basta
C:\tmp3ljmycja\modules\packages\xps.py
C:\tmp3ljmycja\modules\packages\xslt.py
C:\tmp3ljmycja\modules\packages\xps.py.basta
C:\tmp3ljmycja\modules\packages\xslt.py.basta
C:\tmp3ljmycja\modules\packages\zip.py
C:\tmp3bs9izg4\modules\packages\chrome.py.basta
C:\tmp3ljmycja\modules\packages\zip_compound.py
C:\tmp3ljmycja\modules\packages\__init__.py
C:\tmp3ljmycja\modules\packages\zip_compound.py.basta
C:\tmpb9ol310j\lib\api\*
C:\tmp3ljmycja\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\readme.txt
C:\tmp3ljmycja\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\data\yara\AgentTesla.yar
C:\tmpb9ol310j\data\yara\AgentTesla.yar.basta
C:\tmpb9ol310j\data\yara\Al-khaser.yar
C:\tmpb9ol310j\data\yara\AntiCuckoo.yar
C:\tmpb9ol310j\data\yara\AntiCuckoo.yar.basta
C:\tmpb9ol310j\data\yara\Blister.yar
C:\tmp3ljmycja\modules\packages\__init__.py.basta
C:\tmpb9ol310j\data\yara\BuerLoader.yar
C:\tmpb9ol310j\data\yara\BumbleBee.yar
C:\tmpb9ol310j\data\yara\BumbleBee.yar.basta
C:\tmpb9ol310j\data\yara\capemon.yac
C:\tmpb9ol310j\lib\common\*
C:\tmpb9ol310j\lib\common\__pycache__\readme.txt
C:\tmpb9ol310j\data\yara\capemon.yac.basta
C:\tmpb9ol310j\data\yara\CargoBayLoader.yar
C:\tmp3ljmycja\modules\packages\zip.py.basta
C:\tmpb9ol310j\data\yara\DarkGateLoader.yar
C:\tmpb9ol310j\data\yara\DoomedLoader.yar
C:\tmpb9ol310j\data\yara\DarkGateLoader.yar.basta
C:\tmpb9ol310j\data\yara\DridexLoader.yar
C:\tmpb9ol310j\data\yara\EmotetPacker.yar
C:\tmpb9ol310j\data\yara\DoomedLoader.yar.basta
C:\tmpb9ol310j\data\yara\Formbook.yar
C:\tmpb9ol310j\data\yara\DridexLoader.yar.basta
C:\tmpb9ol310j\data\yara\GetTickCountAntiVM.yar
C:\tmpb9ol310j\data\yara\Guloader.yar
C:\tmpb9ol310j\data\yara\EmotetPacker.yar.basta
C:\tmpb9ol310j\data\yara\HeavensSyscall.yar
C:\tmpb9ol310j\lib\core\*
C:\tmpb9ol310j\lib\core\__pycache__\readme.txt
C:\tmpb9ol310j\data\yara\Formbook.yar.basta
C:\tmpb9ol310j\data\yara\IcedID.yar
C:\tmpb9ol310j\data\yara\Latrodectus.yar
C:\tmpb9ol310j\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpb9ol310j\data\yara\Latrodectus.yar.basta
C:\tmpb9ol310j\data\yara\MysterySnail.yar
C:\tmpb9ol310j\data\yara\Lumma.yar
C:\tmpb9ol310j\data\yara\MysterySnail.yar.basta
C:\tmpb9ol310j\data\yara\NSIS.yar
C:\tmpb9ol310j\data\yara\ModiLoader.yar
C:\tmpb9ol310j\data\yara\ModiLoader.yar.basta
C:\tmpb9ol310j\data\yara\Pafish.yar
C:\tmpb9ol310j\data\yara\NSIS.yar.basta
C:\tmpb9ol310j\lib\__pycache__\*
C:\tmpb9ol310j\data\yara\IcedID.yar.basta
C:\tmpb9ol310j\data\yara\Pikabot.yar
C:\tmpb9ol310j\modules\auxiliary\*
C:\tmpb9ol310j\data\yara\Lumma.yar.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\readme.txt
C:\tmpb9ol310j\data\yara\QakBot.yar
C:\tmpb9ol310j\data\yara\RdtscpAntiVM.yar
C:\tmpb9ol310j\data\yara\Rhadamanthys.yar
C:\tmpb9ol310j\data\yara\RdtscpAntiVM.yar.basta
C:\tmpb9ol310j\data\yara\Rhadamanthys.yar.basta
C:\tmpb9ol310j\data\yara\RisePro.yar
C:\tmpb9ol310j\data\yara\SingleStepAntiHook.yar
C:\tmpb9ol310j\data\yara\Stealc.yar
C:\tmpb9ol310j\data\yara\Stealc.yar.basta
C:\tmpb9ol310j\data\yara\Syscall.yar
C:\tmpb9ol310j\data\yara\Syscall.yar.basta
C:\tmpb9ol310j\data\yara\UPX.yar
C:\tmpb9ol310j\data\yara\UPX.yar.basta
C:\tmpb9ol310j\data\yara\UrsnifV3.yar
C:\tmpb9ol310j\data\yara\UrsnifV3.yar.basta
C:\tmpb9ol310j\data\yara\VBCrypter.yar
C:\tmpb9ol310j\data\yara\VBCrypter.yar.basta
C:\tmpb9ol310j\data\yara\XWorm.yar
C:\tmpb9ol310j\data\yara\XWorm.yar.basta
C:\tmpb9ol310j\data\yara\Zloader.yar
C:\tmpb9ol310j\data\yara\SmokeLoader.yar
C:\tmpb9ol310j\data\yara\SmokeLoader.yar.basta
C:\tmpb9ol310j\lib\api\process.py
C:\tmpb9ol310j\data\yara\QakBot.yar.basta
C:\tmpb9ol310j\lib\api\screenshot.py
C:\tmpb9ol310j\data\yara\RisePro.yar.basta
C:\tmpb9ol310j\lib\api\utils.py
C:\tmpb9ol310j\lib\api\screenshot.py.basta
C:\tmpb9ol310j\lib\api\__init__.py
C:\tmpb9ol310j\lib\api\__init__.py.basta
C:\tmpb9ol310j\lib\common\abstracts.py
C:\tmpb9ol310j\lib\api\utils.py.basta
C:\tmpb9ol310j\lib\common\common.py
C:\tmpb9ol310j\lib\common\common.py.basta
C:\tmpb9ol310j\lib\common\constants.py
C:\tmpb9ol310j\lib\common\constants.py.basta
C:\tmpb9ol310j\lib\common\defines.py
C:\tmpb9ol310j\lib\api\process.py.basta
C:\tmpb9ol310j\lib\common\errors.py
C:\tmpb9ol310j\lib\common\abstracts.py.basta
C:\tmpb9ol310j\lib\common\exceptions.py
C:\tmpb9ol310j\lib\common\defines.py.basta
C:\tmpb9ol310j\lib\common\hashing.py
C:\tmpb9ol310j\lib\common\exceptions.py.basta
C:\tmpb9ol310j\lib\common\parse_pe.py
C:\tmpb9ol310j\lib\common\hashing.py.basta
C:\tmpb9ol310j\lib\common\rand.py
C:\tmpb9ol310j\modules\packages\*
C:\tmpb9ol310j\lib\common\parse_pe.py.basta
C:\tmpb9ol310j\lib\common\registry.py
C:\tmpb9ol310j\lib\common\rand.py.basta
C:\tmpb9ol310j\lib\common\results.py
C:\tmpb9ol310j\modules\packages\__pycache__\readme.txt
C:\tmpb9ol310j\lib\common\registry.py.basta
C:\tmpb9ol310j\lib\common\zip_utils.py
C:\tmpb9ol310j\lib\common\results.py.basta
C:\tmpb9ol310j\lib\common\__init__.py
C:\tmpb9ol310j\lib\common\__init__.py.basta
C:\tmpb9ol310j\lib\core\compound.py
C:\tmpb9ol310j\lib\core\compound.py.basta
C:\tmpb9ol310j\lib\core\config.py
C:\tmpb9ol310j\lib\common\errors.py.basta
C:\tmpb9ol310j\lib\core\log.py
C:\tmpb9ol310j\lib\common\zip_utils.py.basta
C:\tmpb9ol310j\lib\core\packages.py
C:\tmpb9ol310j\lib\core\config.py.basta
C:\tmpb9ol310j\lib\core\pipe.py
C:\tmpb9ol310j\lib\core\log.py.basta
C:\tmpb9ol310j\lib\core\privileges.py
C:\tmpb9ol310j\lib\core\packages.py.basta
C:\tmpb9ol310j\lib\core\startup.py
C:\tmpb9ol310j\lib\core\pipe.py.basta
C:\tmpb9ol310j\lib\core\__init__.py
C:\tmpb9ol310j\lib\core\__init__.py.basta
C:\tmpb9ol310j\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\amsi.py
C:\tmpb9ol310j\lib\core\privileges.py.basta
C:\tmpb9ol310j\modules\auxiliary\amsi_collector.py
C:\tmpb9ol310j\lib\core\startup.py.basta
C:\tmpb9ol310j\modules\auxiliary\autoruns.py
C:\tmpb9ol310j\modules\auxiliary\amsi_collector.py.basta
C:\tmpb9ol310j\modules\auxiliary\browser.py
C:\tmpb9ol310j\modules\auxiliary\browser.py.basta
C:\tmpb9ol310j\modules\auxiliary\curtain.py
C:\tmpb9ol310j\modules\auxiliary\autoruns.py.basta
C:\tmpb9ol310j\modules\auxiliary\digisig.py
C:\tmpb9ol310j\modules\auxiliary\curtain.py.basta
C:\tmpb9ol310j\modules\auxiliary\disguise.py
C:\tmpb9ol310j\modules\auxiliary\digisig.py.basta
C:\tmpb9ol310j\modules\auxiliary\during_script.py
C:\tmpb9ol310j\modules\auxiliary\during_script.py.basta
C:\tmpb9ol310j\modules\auxiliary\evtx.py
C:\tmpb9ol310j\modules\auxiliary\disguise.py.basta
C:\tmpb9ol310j\modules\auxiliary\filepickup.py
C:\tmpb9ol310j\modules\auxiliary\filepickup.py.basta
C:\tmpb9ol310j\modules\auxiliary\html_scraper.py
C:\tmpb9ol310j\modules\auxiliary\evtx.py.basta
C:\tmpb9ol310j\modules\auxiliary\human.py
C:\tmpb9ol310j\modules\auxiliary\amsi.py.basta
C:\tmpb9ol310j\modules\auxiliary\permissions.py
C:\tmpb9ol310j\modules\auxiliary\html_scraper.py.basta
C:\tmpb9ol310j\modules\auxiliary\pre_script.py
C:\tmpb9ol310j\modules\auxiliary\permissions.py.basta
C:\tmpb9ol310j\modules\auxiliary\procmon.py
C:\tmpb9ol310j\modules\auxiliary\pre_script.py.basta
C:\tmpb9ol310j\modules\auxiliary\recentfiles.py
C:\tmpb9ol310j\modules\auxiliary\procmon.py.basta
C:\tmpb9ol310j\modules\auxiliary\screenshots.py
C:\tmpb9ol310j\modules\auxiliary\recentfiles.py.basta
C:\tmpb9ol310j\modules\auxiliary\sysmon.py
C:\tmpb9ol310j\modules\auxiliary\screenshots.py.basta
C:\tmpb9ol310j\modules\auxiliary\tlsdump.py
C:\tmpb9ol310j\modules\auxiliary\tlsdump.py.basta
C:\tmpb9ol310j\modules\auxiliary\usage.py
C:\tmpb9ol310j\modules\auxiliary\sysmon.py.basta
C:\tmpb9ol310j\modules\auxiliary\__init__.py
C:\tmpb9ol310j\modules\auxiliary\__init__.py.basta
C:\tmpb9ol310j\modules\packages\access.py
C:\tmpb9ol310j\modules\packages\access.py.basta
C:\tmpb9ol310j\modules\packages\applet.py
C:\tmpb9ol310j\modules\auxiliary\usage.py.basta
C:\tmpb9ol310j\modules\packages\chm.py
C:\tmpb9ol310j\modules\packages\autoit.py
C:\tmpb9ol310j\modules\packages\autoit.py.basta
C:\tmpb9ol310j\modules\packages\chrome.py
C:\tmpb9ol310j\modules\packages\chm.py.basta
C:\tmpb9ol310j\modules\packages\chromium.py
C:\tmpb9ol310j\modules\packages\archive.py
C:\tmpb9ol310j\modules\packages\archive.py.basta
C:\tmpb9ol310j\modules\packages\cpl.py
C:\tmpb9ol310j\modules\packages\chrome.py.basta
C:\tmpb9ol310j\modules\packages\dll.py
C:\tmpb9ol310j\modules\packages\chromium.py.basta
C:\tmpb9ol310j\modules\packages\doc.py
C:\tmpb9ol310j\modules\packages\cpl.py.basta
C:\tmpb9ol310j\modules\packages\doc2016.py
C:\tmpb9ol310j\modules\packages\doc.py.basta
C:\tmpb9ol310j\modules\packages\doc_antivm.py
C:\tmpb9ol310j\modules\packages\doc2016.py.basta
C:\tmpb9ol310j\modules\packages\edge.py
C:\tmpb9ol310j\modules\packages\dll.py.basta
C:\tmpb9ol310j\modules\packages\eml.py
C:\tmpb9ol310j\modules\packages\doc_antivm.py.basta
C:\tmpb9ol310j\modules\packages\exe.py
C:\tmpb9ol310j\modules\packages\edge.py.basta
C:\tmpb9ol310j\modules\packages\firefox.py
C:\tmpb9ol310j\modules\packages\eml.py.basta
C:\tmpb9ol310j\modules\packages\generic.py
C:\tmpb9ol310j\modules\packages\exe.py.basta
C:\tmpb9ol310j\modules\packages\hta.py
C:\tmpb9ol310j\modules\packages\firefox.py.basta
C:\tmpb9ol310j\modules\packages\hwp.py
C:\tmpb9ol310j\modules\packages\ichitaro.py
C:\tmpb9ol310j\modules\packages\hwp.py.basta
C:\tmpb9ol310j\modules\packages\ie.py
C:\tmpb9ol310j\modules\packages\inf.py
C:\tmpb9ol310j\modules\packages\ichitaro.py.basta
C:\tmpb9ol310j\modules\packages\inp.py
C:\tmpb9ol310j\modules\packages\ie.py.basta
C:\tmpb9ol310j\modules\packages\jar.py
C:\tmpb9ol310j\modules\packages\inf.py.basta
C:\tmpb9ol310j\modules\packages\js.py
C:\tmpb9ol310j\modules\packages\inp.py.basta
C:\tmpb9ol310j\modules\packages\js_antivm.py
C:\tmpb9ol310j\modules\packages\jar.py.basta
C:\tmpb9ol310j\modules\packages\lnk.py
C:\tmpb9ol310j\modules\packages\js.py.basta
C:\tmpb9ol310j\modules\packages\mht.py
C:\tmpb9ol310j\modules\packages\js_antivm.py.basta
C:\tmpb9ol310j\modules\packages\msbuild.py
C:\tmpb9ol310j\modules\packages\lnk.py.basta
C:\tmpb9ol310j\modules\packages\msg.py
C:\tmpb9ol310j\modules\packages\mht.py.basta
C:\tmpb9ol310j\modules\packages\msi.py
C:\tmpb9ol310j\modules\__pycache__\*
C:\tmpb9ol310j\tests\lib\*
C:\tmpb9ol310j\tests\lib\api\readme.txt
C:\tmpb9ol310j\tests\lib\common\readme.txt
C:\tmpb9ol310j\tests\modules\*
C:\tmpb9ol310j\tests\modules\packages\readme.txt
C:\tmpb9ol310j\modules\packages\msbuild.py.basta
C:\tmpb9ol310j\modules\packages\msix.py
C:\tmpb9ol310j\modules\packages\msg.py.basta
C:\tmpb9ol310j\modules\packages\nsis.py
C:\tmpb9ol310j\modules\packages\msi.py.basta
C:\tmpb9ol310j\modules\packages\ollydbg.py
C:\tmpcynaajs6\data\yara\*
C:\tmpb9ol310j\modules\packages\msix.py.basta
C:\tmpb9ol310j\modules\packages\one.py
C:\tmpb9ol310j\modules\packages\nsis.py.basta
C:\tmpb9ol310j\modules\packages\pdf.py
C:\tmpb9ol310j\modules\packages\ollydbg.py.basta
C:\tmpb9ol310j\modules\packages\ppt.py
C:\tmpb9ol310j\modules\packages\ppt2016.py
C:\tmpb9ol310j\modules\packages\ppt.py.basta
C:\tmpb9ol310j\modules\packages\ps1.py
C:\tmpb9ol310j\modules\packages\pub.py
C:\tmpb9ol310j\modules\packages\ppt2016.py.basta
C:\tmpb9ol310j\modules\packages\pub2016.py
C:\tmpb9ol310j\modules\packages\ps1.py.basta
C:\tmpb9ol310j\modules\packages\python.py
C:\tmpb9ol310j\modules\packages\pub.py.basta
C:\tmpb9ol310j\modules\packages\rar.py
C:\tmpb9ol310j\modules\packages\pub2016.py.basta
C:\tmpb9ol310j\modules\packages\reg.py
C:\tmpb9ol310j\modules\packages\python.py.basta
C:\tmpb9ol310j\modules\packages\regsvr.py
C:\tmpb9ol310j\modules\packages\reg.py.basta
C:\tmpb9ol310j\modules\packages\sct.py
C:\tmpb9ol310j\modules\packages\regsvr.py.basta
C:\tmpb9ol310j\modules\packages\service.py
C:\tmpb9ol310j\modules\packages\rar.py.basta
C:\tmpb9ol310j\modules\packages\service_dll.py
C:\tmpb9ol310j\modules\packages\sct.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode-Unpacker.py
C:\tmpb9ol310j\modules\packages\service.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode.py
C:\tmpb9ol310j\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode_x64.py
C:\tmpb9ol310j\modules\packages\service_dll.py.basta
C:\tmpb9ol310j\modules\packages\swf.py
C:\tmpb9ol310j\modules\packages\Shellcode.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker.py
C:\tmpb9ol310j\modules\packages\Shellcode_x64.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_dll.py
C:\tmpb9ol310j\modules\packages\swf.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_js.py
C:\tmpb9ol310j\modules\packages\Unpacker.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_ps1.py
C:\tmpb9ol310j\modules\packages\Unpacker_dll.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_regsvr.py
C:\tmpb9ol310j\modules\packages\Unpacker_js.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_zip.py
C:\tmpb9ol310j\modules\packages\Unpacker_ps1.py.basta
C:\tmpb9ol310j\modules\packages\vawtrak.py
C:\tmpb9ol310j\modules\packages\Unpacker_zip.py.basta
C:\tmpb9ol310j\modules\packages\vbejse.py
C:\tmpb9ol310j\modules\packages\vawtrak.py.basta
C:\tmpb9ol310j\modules\packages\vbs.py
C:\tmpb9ol310j\modules\packages\vbejse.py.basta
C:\tmpb9ol310j\modules\packages\wsf.py
C:\tmpb9ol310j\modules\packages\vbs.py.basta
C:\tmpb9ol310j\modules\packages\xls.py
C:\tmpb9ol310j\modules\packages\wsf.py.basta
C:\tmpb9ol310j\modules\packages\xls2016.py
C:\tmpb9ol310j\modules\packages\xls.py.basta
C:\tmpb9ol310j\modules\packages\xps.py
C:\tmpb9ol310j\modules\packages\xls2016.py.basta
C:\tmpb9ol310j\modules\packages\xslt.py
C:\tmpb9ol310j\modules\packages\xps.py.basta
C:\tmpb9ol310j\modules\packages\zip.py
C:\tmpb9ol310j\modules\packages\xslt.py.basta
C:\tmpb9ol310j\modules\packages\zip_compound.py
C:\tmpb9ol310j\modules\packages\zip.py.basta
C:\tmpb9ol310j\modules\packages\__init__.py
C:\tmpcynaajs6\lib\api\*
C:\tmp3bs9izg4\modules\packages\python.py.basta
C:\tmpb9ol310j\data\yara\Zloader.yar.basta
C:\tmpcynaajs6\lib\api\__pycache__\readme.txt
C:\tmpb9ol310j\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__init__.py.basta
C:\tmpcynaajs6\data\yara\Blister.yar
C:\tmpcynaajs6\data\yara\AntiCuckoo.yar
C:\tmpcynaajs6\data\yara\AntiCuckoo.yar.basta
C:\tmpcynaajs6\data\yara\BumbleBee.yar
C:\tmpcynaajs6\data\yara\BumbleBee.yar.basta
C:\tmpcynaajs6\data\yara\DarkGate.yar
C:\tmpcynaajs6\data\yara\capemon.yac
C:\tmpcynaajs6\data\yara\capemon.yac.basta
C:\tmpcynaajs6\data\yara\DarkGateLoader.yar
C:\tmpcynaajs6\data\yara\CargoBayLoader.yar
C:\tmpcynaajs6\data\yara\CargoBayLoader.yar.basta
C:\tmpcynaajs6\data\yara\DoomedLoader.yar
C:\tmpcynaajs6\data\yara\DarkGateLoader.yar.basta
C:\tmpcynaajs6\data\yara\DridexLoader.yar
C:\tmpcynaajs6\lib\common\*
C:\tmpcynaajs6\data\yara\DridexLoader.yar.basta
C:\tmpcynaajs6\data\yara\EmotetPacker.yar
C:\tmpcynaajs6\data\yara\EmotetPacker.yar.basta
C:\tmpcynaajs6\data\yara\Formbook.yar
C:\tmpcynaajs6\data\yara\Formbook.yar.basta
C:\tmpcynaajs6\data\yara\GetTickCountAntiVM.yar
C:\tmpcynaajs6\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpcynaajs6\data\yara\Guloader.yar
C:\tmpcynaajs6\data\yara\Guloader.yar.basta
C:\tmpcynaajs6\data\yara\HeavensSyscall.yar
C:\tmpcynaajs6\data\yara\HeavensSyscall.yar.basta
C:\tmpcynaajs6\data\yara\IcedID.yar
C:\tmpcynaajs6\data\yara\IcedID.yar.basta
C:\tmpcynaajs6\data\yara\Blister.yar.basta
C:\tmpcynaajs6\data\yara\DarkGate.yar.basta
C:\tmpcynaajs6\data\yara\DoomedLoader.yar.basta
C:\tmpcynaajs6\lib\common\__pycache__\readme.txt
C:\tmpcynaajs6\data\yara\Latrodectus.yar
C:\tmpcynaajs6\lib\core\*
C:\tmpcynaajs6\data\yara\Latrodectus.yar.basta
C:\tmpcynaajs6\lib\core\__pycache__\readme.txt
C:\tmp3bs9izg4\modules\packages\chromium.py.basta
C:\tmpcynaajs6\data\yara\Lumma.yar
C:\tmpcynaajs6\data\yara\ModiLoader.yar
C:\tmpcynaajs6\data\yara\MysterySnail.yar
C:\tmpcynaajs6\data\yara\Lumma.yar.basta
C:\tmpcynaajs6\data\yara\NSIS.yar
C:\tmpcynaajs6\data\yara\Pafish.yar
C:\tmpcynaajs6\data\yara\NSIS.yar.basta
C:\tmpcynaajs6\data\yara\Pikabot.yar
C:\tmpcynaajs6\data\yara\QakBot.yar
C:\tmpcynaajs6\data\yara\Pafish.yar.basta
C:\tmpcynaajs6\data\yara\RdtscpAntiVM.yar
C:\tmpcynaajs6\data\yara\Rhadamanthys.yar
C:\tmpcynaajs6\data\yara\Pikabot.yar.basta
C:\tmpcynaajs6\data\yara\RisePro.yar
C:\tmpcynaajs6\data\yara\SingleStepAntiHook.yar
C:\tmpcynaajs6\lib\__pycache__\*
C:\tmpcynaajs6\modules\auxiliary\*
C:\tmpcynaajs6\modules\auxiliary\__pycache__\readme.txt
C:\tmpcynaajs6\data\yara\QakBot.yar.basta
C:\tmpcynaajs6\data\yara\SmokeLoader.yar
C:\tmpcynaajs6\data\yara\Rhadamanthys.yar.basta
C:\tmpcynaajs6\data\yara\SingleStepAntiHook.yar.basta
C:\tmpcynaajs6\data\yara\Socks5Systemz.yar
C:\tmpcynaajs6\data\yara\Stealc.yar
C:\tmpcynaajs6\data\yara\Socks5Systemz.yar.basta
C:\tmpcynaajs6\data\yara\Syscall.yar
C:\tmpcynaajs6\data\yara\Syscall.yar.basta
C:\tmpcynaajs6\data\yara\UPX.yar
C:\tmpcynaajs6\data\yara\RisePro.yar.basta
C:\tmpcynaajs6\data\yara\UrsnifV3.yar
C:\tmpcynaajs6\data\yara\VBCrypter.yar
C:\tmpcynaajs6\data\yara\XWorm.yar
C:\tmpcynaajs6\data\yara\Zloader.yar
C:\tmpcynaajs6\lib\api\process.py
C:\tmpcynaajs6\data\yara\UrsnifV3.yar.basta
C:\tmpcynaajs6\lib\api\screenshot.py
C:\tmpcynaajs6\data\yara\Zloader.yar.basta
C:\tmpcynaajs6\data\yara\XWorm.yar.basta
C:\tmpcynaajs6\lib\api\utils.py
C:\tmpcynaajs6\lib\api\utils.py.basta
C:\tmpcynaajs6\lib\api\__init__.py
C:\tmpcynaajs6\lib\common\abstracts.py
C:\tmpcynaajs6\lib\common\abstracts.py.basta
C:\tmpcynaajs6\lib\common\constants.py
C:\tmpcynaajs6\lib\common\defines.py
C:\tmpcynaajs6\lib\common\errors.py
C:\tmpcynaajs6\lib\common\exceptions.py
C:\tmpcynaajs6\lib\common\exceptions.py.basta
C:\tmpcynaajs6\lib\core\compound.py
C:\tmpcynaajs6\lib\core\compound.py.basta
C:\tmpcynaajs6\modules\packages\__pycache__\readme.txt
C:\tmpcynaajs6\lib\core\config.py
C:\tmpcynaajs6\lib\common\__init__.py
C:\tmpcynaajs6\lib\common\__init__.py.basta
C:\tmpcynaajs6\lib\common\hashing.py
C:\tmpcynaajs6\lib\common\hashing.py.basta
C:\tmpcynaajs6\lib\core\log.py
C:\tmpcynaajs6\lib\common\zip_utils.py
C:\tmpcynaajs6\lib\common\zip_utils.py.basta
C:\tmpcynaajs6\lib\core\packages.py
C:\tmpcynaajs6\lib\core\pipe.py
C:\tmpcynaajs6\lib\common\results.py
C:\tmpcynaajs6\lib\common\results.py.basta
C:\tmpcynaajs6\lib\core\privileges.py
C:\tmpcynaajs6\lib\core\privileges.py.basta
C:\tmpcynaajs6\lib\core\packages.py.basta
C:\tmpcynaajs6\lib\core\config.py.basta
C:\tmpcynaajs6\lib\core\startup.py
C:\tmpcynaajs6\lib\core\log.py.basta
C:\tmpcynaajs6\lib\core\__init__.py
C:\tmpcynaajs6\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\amsi.py
C:\tmpcynaajs6\modules\auxiliary\amsi_collector.py
C:\tmpcynaajs6\modules\auxiliary\autoruns.py
C:\tmpcynaajs6\modules\auxiliary\browser.py
C:\tmpcynaajs6\modules\auxiliary\curtain.py
C:\tmpcynaajs6\modules\auxiliary\autoruns.py.basta
C:\tmpcynaajs6\modules\auxiliary\digisig.py
C:\tmpcynaajs6\modules\auxiliary\browser.py.basta
C:\tmpcynaajs6\modules\auxiliary\disguise.py
C:\tmpcynaajs6\modules\auxiliary\during_script.py
C:\tmpcynaajs6\modules\auxiliary\during_script.py.basta
C:\tmpcynaajs6\modules\auxiliary\evtx.py
C:\tmpcynaajs6\modules\auxiliary\amsi.py.basta
C:\tmpcynaajs6\modules\auxiliary\filepickup.py
C:\tmpcynaajs6\modules\auxiliary\digisig.py.basta
C:\tmpcynaajs6\modules\auxiliary\html_scraper.py
C:\tmpcynaajs6\modules\auxiliary\human.py
C:\tmpcynaajs6\modules\auxiliary\html_scraper.py.basta
C:\tmpcynaajs6\modules\auxiliary\permissions.py
C:\tmpcynaajs6\modules\auxiliary\human.py.basta
C:\tmpcynaajs6\modules\auxiliary\pre_script.py
C:\tmpcynaajs6\modules\auxiliary\disguise.py.basta
C:\tmpcynaajs6\modules\auxiliary\pre_script.py.basta
C:\tmpcynaajs6\modules\auxiliary\filepickup.py.basta
C:\tmpcynaajs6\modules\auxiliary\recentfiles.py
C:\tmpcynaajs6\modules\auxiliary\screenshots.py
C:\tmpcynaajs6\modules\auxiliary\procmon.py
C:\tmpcynaajs6\modules\auxiliary\permissions.py.basta
C:\tmpcynaajs6\modules\auxiliary\sysmon.py
C:\tmpcynaajs6\modules\auxiliary\recentfiles.py.basta
C:\tmpcynaajs6\modules\auxiliary\procmon.py.basta
C:\tmpcynaajs6\modules\auxiliary\usage.py
C:\tmpcynaajs6\modules\auxiliary\evtx.py.basta
C:\tmpcynaajs6\modules\auxiliary\__init__.py
C:\tmpcynaajs6\modules\packages\access.py
C:\tmpcynaajs6\modules\auxiliary\sysmon.py.basta
C:\tmpcynaajs6\modules\packages\archive.py
C:\tmpcynaajs6\modules\packages\autoit.py
C:\tmpcynaajs6\modules\packages\access.py.basta
C:\tmpcynaajs6\modules\packages\chm.py
C:\tmpcynaajs6\modules\packages\archive.py.basta
C:\tmpcynaajs6\modules\packages\chrome.py
C:\tmpcynaajs6\modules\packages\chrome.py.basta
C:\tmpcynaajs6\modules\packages\chromium.py
C:\tmpcynaajs6\modules\packages\applet.py
C:\tmpcynaajs6\modules\packages\applet.py.basta
C:\tmpcynaajs6\modules\packages\cpl.py
C:\tmpcynaajs6\modules\packages\chm.py.basta
C:\tmpcynaajs6\modules\packages\chromium.py.basta
C:\tmpcynaajs6\modules\packages\doc.py
C:\tmpcynaajs6\modules\packages\doc.py.basta
C:\tmpcynaajs6\modules\packages\cpl.py.basta
C:\tmpcynaajs6\modules\packages\doc2016.py
C:\tmpcynaajs6\modules\packages\doc2016.py.basta
C:\tmpcynaajs6\modules\packages\eml.py
C:\tmpcynaajs6\modules\packages\eml.py.basta
C:\tmpcynaajs6\modules\packages\firefox.py
C:\tmpcynaajs6\modules\packages\exe.py
C:\tmpcynaajs6\modules\packages\exe.py.basta
C:\tmpcynaajs6\modules\packages\generic.py
C:\tmpcynaajs6\modules\packages\firefox.py.basta
C:\tmpcynaajs6\modules\packages\hta.py
C:\tmpcynaajs6\modules\packages\hwp.py
C:\tmpcynaajs6\modules\packages\hta.py.basta
C:\tmpcynaajs6\modules\packages\ichitaro.py
C:\tmpcynaajs6\modules\packages\ie.py
C:\tmpcynaajs6\modules\packages\ichitaro.py.basta
C:\tmpcynaajs6\modules\packages\inf.py
C:\tmpcynaajs6\modules\packages\ie.py.basta
C:\tmpcynaajs6\modules\packages\inp.py
C:\tmpcynaajs6\modules\packages\inf.py.basta
C:\tmpcynaajs6\modules\packages\jar.py
C:\tmpcynaajs6\modules\packages\inp.py.basta
C:\tmpcynaajs6\modules\packages\js.py
C:\tmpcynaajs6\modules\packages\jar.py.basta
C:\tmpcynaajs6\modules\packages\js_antivm.py
C:\tmpcynaajs6\modules\packages\js.py.basta
C:\tmpcynaajs6\modules\packages\lnk.py
C:\tmpcynaajs6\modules\packages\js_antivm.py.basta
C:\tmpcynaajs6\modules\packages\mht.py
C:\tmpcynaajs6\modules\packages\lnk.py.basta
C:\tmpcynaajs6\modules\packages\msbuild.py
C:\tmpcynaajs6\modules\packages\mht.py.basta
C:\tmpcynaajs6\modules\packages\msg.py
C:\tmpcynaajs6\modules\__pycache__\*
C:\tmpcynaajs6\tests\lib\*
C:\tmpcynaajs6\tests\lib\api\readme.txt
C:\tmpcynaajs6\tests\lib\common\readme.txt
C:\tmpcynaajs6\tests\modules\*
C:\tmpcynaajs6\tests\modules\packages\readme.txt
C:\tmpcynaajs6\modules\auxiliary\amsi_collector.py.basta
C:\tmpcynaajs6\modules\packages\msi.py
C:\tmpcynaajs6\modules\packages\dll.py
C:\tmpcynaajs6\modules\packages\dll.py.basta
C:\tmpcynaajs6\modules\packages\msix.py
C:\tmpcynaajs6\modules\packages\wsf.py
C:\tmpcynaajs6\modules\packages\wsf.py.basta
C:\tmpcynaajs6\modules\packages\vbejse.py
C:\tmpcynaajs6\modules\packages\vbejse.py.basta
C:\tmpcynaajs6\modules\packages\xls.py
C:\tmpcynaajs6\modules\packages\msix.py.basta
C:\tmpcynaajs6\modules\packages\xls2016.py
C:\tmpcynaajs6\modules\packages\xps.py
C:\tmpcynaajs6\modules\packages\xslt.py
C:\tmpcynaajs6\modules\packages\doc_antivm.py
C:\tmpcynaajs6\modules\packages\doc_antivm.py.basta
C:\tmpcynaajs6\modules\packages\zip.py
C:\tmpcynaajs6\modules\packages\zip_compound.py
C:\tmpcynaajs6\modules\packages\__init__.py
C:\tmpd5tr1_rv\lib\api\*
C:\tmpcynaajs6\modules\packages\edge.py
C:\tmpcynaajs6\modules\packages\edge.py.basta
C:\tmpcynaajs6\modules\packages\xslt.py.basta
C:\tmpcynaajs6\modules\packages\zip_compound.py.basta
C:\tmpcynaajs6\modules\packages\zip.py.basta
C:\tmpcynaajs6\modules\packages\xps.py.basta
C:\tmpcynaajs6\modules\packages\__init__.py.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\readme.txt
C:\tmpcynaajs6\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\data\yara\AgentTesla.yar
C:\tmpcynaajs6\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\data\yara\AntiCuckoo.yar
C:\tmpd5tr1_rv\data\yara\AgentTesla.yar.basta
C:\tmpd5tr1_rv\data\yara\Blister.yar
C:\tmpd5tr1_rv\data\yara\BuerLoader.yar
C:\tmpd5tr1_rv\data\yara\Al-khaser.yar
C:\tmpd5tr1_rv\data\yara\Al-khaser.yar.basta
C:\tmpd5tr1_rv\data\yara\BumbleBee.yar
C:\tmpd5tr1_rv\data\yara\capemon.yac
C:\tmpd5tr1_rv\data\yara\AntiCuckoo.yar.basta
C:\tmpd5tr1_rv\data\yara\Blister.yar.basta
C:\tmpd5tr1_rv\data\yara\CargoBayLoader.yar
C:\tmpd5tr1_rv\data\yara\BuerLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\DarkGate.yar
C:\tmpd5tr1_rv\data\yara\BumbleBee.yar.basta
C:\tmpd5tr1_rv\data\yara\DarkGateLoader.yar
C:\tmpd5tr1_rv\data\yara\DoomedLoader.yar
C:\tmpd5tr1_rv\data\yara\CargoBayLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\DridexLoader.yar
C:\tmpd5tr1_rv\data\yara\EmotetPacker.yar
C:\tmpd5tr1_rv\data\yara\DarkGate.yar.basta
C:\tmpd5tr1_rv\data\yara\Formbook.yar
C:\tmpd5tr1_rv\data\yara\DarkGateLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\GetTickCountAntiVM.yar
C:\tmpd5tr1_rv\data\yara\DoomedLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\Guloader.yar
C:\tmpd5tr1_rv\data\yara\DridexLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\HeavensSyscall.yar
C:\tmpd5tr1_rv\data\yara\EmotetPacker.yar.basta
C:\tmpd5tr1_rv\data\yara\IcedID.yar
C:\tmpd5tr1_rv\data\yara\HeavensSyscall.yar.basta
C:\tmpd5tr1_rv\data\yara\Guloader.yar.basta
C:\tmpd5tr1_rv\data\yara\Latrodectus.yar
C:\tmpd5tr1_rv\data\yara\Lumma.yar
C:\tmpd5tr1_rv\data\yara\ModiLoader.yar
C:\tmpd5tr1_rv\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpd5tr1_rv\data\yara\Lumma.yar.basta
C:\tmpd5tr1_rv\data\yara\MysterySnail.yar
C:\tmpd5tr1_rv\data\yara\Latrodectus.yar.basta
C:\tmpd5tr1_rv\data\yara\NSIS.yar
C:\tmpd5tr1_rv\data\yara\Pikabot.yar
C:\tmpd5tr1_rv\data\yara\MysterySnail.yar.basta
C:\tmpd5tr1_rv\data\yara\RdtscpAntiVM.yar
C:\tmpd5tr1_rv\data\yara\QakBot.yar
C:\tmpd5tr1_rv\data\yara\RdtscpAntiVM.yar.basta
C:\tmpd5tr1_rv\data\yara\Rhadamanthys.yar
C:\tmpd5tr1_rv\data\yara\Pafish.yar
C:\tmpd5tr1_rv\data\yara\Stealc.yar
C:\tmpd5tr1_rv\data\yara\SmokeLoader.yar
C:\tmpd5tr1_rv\data\yara\SmokeLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\Pafish.yar.basta
C:\tmpd5tr1_rv\data\yara\UPX.yar
C:\tmpd5tr1_rv\data\yara\Syscall.yar
C:\tmpd5tr1_rv\data\yara\VBCrypter.yar
C:\tmpd5tr1_rv\data\yara\Stealc.yar.basta
C:\tmpd5tr1_rv\data\yara\UrsnifV3.yar
C:\tmpd5tr1_rv\data\yara\XWorm.yar
C:\tmpd5tr1_rv\data\yara\VBCrypter.yar.basta
C:\tmpd5tr1_rv\data\yara\Zloader.yar
C:\tmpd5tr1_rv\lib\api\process.py
C:\tmpd5tr1_rv\lib\api\screenshot.py
C:\tmpd5tr1_rv\data\yara\UrsnifV3.yar.basta
C:\tmpd5tr1_rv\lib\api\utils.py
C:\tmpd5tr1_rv\data\yara\XWorm.yar.basta
C:\tmpd5tr1_rv\lib\api\__init__.py
C:\tmpd5tr1_rv\lib\api\screenshot.py.basta
C:\tmpd5tr1_rv\lib\api\utils.py.basta
C:\tmpd5tr1_rv\lib\api\__init__.py.basta
C:\tmpd5tr1_rv\lib\common\*
C:\tmpd5tr1_rv\lib\common\__pycache__\readme.txt
C:\tmpd5tr1_rv\lib\api\process.py.basta
C:\tmpd5tr1_rv\lib\common\abstracts.py
C:\tmpd5tr1_rv\lib\core\__pycache__\readme.txt
C:\tmpd5tr1_rv\lib\__pycache__\*
C:\tmpd5tr1_rv\modules\auxiliary\*
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\readme.txt
C:\tmpd5tr1_rv\lib\common\abstracts.py.basta
C:\tmpd5tr1_rv\lib\common\common.py
C:\tmpd5tr1_rv\lib\common\common.py.basta
C:\tmpd5tr1_rv\lib\common\constants.py
C:\tmpd5tr1_rv\lib\common\constants.py.basta
C:\tmpd5tr1_rv\lib\common\defines.py
C:\tmpd5tr1_rv\lib\common\defines.py.basta
C:\tmpd5tr1_rv\lib\common\errors.py
C:\tmpd5tr1_rv\modules\packages\*
C:\tmpd5tr1_rv\lib\common\errors.py.basta
C:\tmpd5tr1_rv\lib\common\exceptions.py
C:\tmpd5tr1_rv\lib\common\exceptions.py.basta
C:\tmpd5tr1_rv\modules\packages\__pycache__\readme.txt
C:\tmpd5tr1_rv\lib\common\hashing.py
C:\tmpd5tr1_rv\lib\common\hashing.py.basta
C:\tmpd5tr1_rv\lib\common\parse_pe.py
C:\tmpd5tr1_rv\lib\common\parse_pe.py.basta
C:\tmpd5tr1_rv\lib\common\rand.py
C:\tmpd5tr1_rv\lib\common\rand.py.basta
C:\tmpd5tr1_rv\lib\common\registry.py
C:\tmpd5tr1_rv\lib\common\registry.py.basta
C:\tmpd5tr1_rv\lib\common\results.py
C:\tmpd5tr1_rv\lib\common\results.py.basta
C:\tmpd5tr1_rv\lib\common\zip_utils.py
C:\tmpd5tr1_rv\lib\common\zip_utils.py.basta
C:\tmpd5tr1_rv\lib\common\__init__.py
C:\tmpd5tr1_rv\lib\common\__init__.py.basta
C:\tmpd5tr1_rv\lib\core\compound.py
C:\tmpd5tr1_rv\lib\core\compound.py.basta
C:\tmpd5tr1_rv\lib\core\config.py
C:\tmpd5tr1_rv\lib\core\config.py.basta
C:\tmpd5tr1_rv\lib\core\log.py
C:\tmpd5tr1_rv\lib\core\log.py.basta
C:\tmpd5tr1_rv\lib\core\packages.py
C:\tmpd5tr1_rv\lib\core\packages.py.basta
C:\tmpd5tr1_rv\lib\core\pipe.py
C:\tmpd5tr1_rv\lib\core\pipe.py.basta
C:\tmpd5tr1_rv\lib\core\privileges.py
C:\tmpd5tr1_rv\lib\core\privileges.py.basta
C:\tmpd5tr1_rv\lib\core\startup.py
C:\tmpd5tr1_rv\lib\core\startup.py.basta
C:\tmpd5tr1_rv\lib\core\__init__.py
C:\tmpd5tr1_rv\lib\core\__init__.py.basta
C:\tmpd5tr1_rv\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\amsi.py
C:\tmpd5tr1_rv\modules\auxiliary\amsi.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\amsi_collector.py
C:\tmpd5tr1_rv\modules\auxiliary\amsi_collector.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\autoruns.py
C:\tmpd5tr1_rv\modules\auxiliary\autoruns.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\browser.py
C:\tmpd5tr1_rv\modules\auxiliary\browser.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\curtain.py
C:\tmpd5tr1_rv\data\yara\Syscall.yar.basta
C:\tmpd5tr1_rv\modules\auxiliary\disguise.py
C:\tmpd5tr1_rv\modules\auxiliary\disguise.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\during_script.py
C:\tmpd5tr1_rv\modules\auxiliary\evtx.py
C:\tmpd5tr1_rv\modules\auxiliary\evtx.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\filepickup.py
C:\tmpd5tr1_rv\modules\auxiliary\filepickup.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\html_scraper.py
C:\tmpd5tr1_rv\modules\auxiliary\html_scraper.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\human.py
C:\tmpd5tr1_rv\modules\auxiliary\human.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\permissions.py
C:\tmpd5tr1_rv\modules\auxiliary\permissions.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\pre_script.py
C:\tmpd5tr1_rv\modules\auxiliary\pre_script.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\procmon.py
C:\tmpd5tr1_rv\modules\auxiliary\procmon.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\recentfiles.py
C:\tmpd5tr1_rv\modules\auxiliary\recentfiles.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\screenshots.py
C:\tmpd5tr1_rv\modules\auxiliary\screenshots.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\sysmon.py
C:\tmpd5tr1_rv\modules\auxiliary\sysmon.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\tlsdump.py
C:\tmpd5tr1_rv\modules\auxiliary\during_script.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\usage.py
C:\tmpd5tr1_rv\modules\auxiliary\__init__.py
C:\tmpd5tr1_rv\modules\auxiliary\tlsdump.py.basta
C:\tmpd5tr1_rv\modules\packages\access.py
C:\tmpd5tr1_rv\modules\packages\applet.py
C:\tmpd5tr1_rv\modules\packages\archive.py
C:\tmpd5tr1_rv\modules\auxiliary\__init__.py.basta
C:\tmpd5tr1_rv\modules\packages\autoit.py
C:\tmpd5tr1_rv\modules\packages\chm.py
C:\tmpd5tr1_rv\modules\packages\chrome.py
C:\tmpd5tr1_rv\modules\packages\autoit.py.basta
C:\tmpd5tr1_rv\modules\packages\archive.py.basta
C:\tmpd5tr1_rv\modules\packages\chromium.py
C:\tmpd5tr1_rv\modules\packages\chm.py.basta
C:\tmpd5tr1_rv\modules\packages\cpl.py
C:\tmpd5tr1_rv\modules\packages\cpl.py.basta
C:\tmpd5tr1_rv\modules\packages\doc_antivm.py
C:\tmpd5tr1_rv\modules\packages\edge.py
C:\tmpd5tr1_rv\modules\packages\doc_antivm.py.basta
C:\tmpd5tr1_rv\modules\packages\eml.py
C:\tmpd5tr1_rv\modules\packages\firefox.py
C:\tmpd5tr1_rv\modules\packages\generic.py
C:\tmpd5tr1_rv\modules\packages\hta.py
C:\tmpd5tr1_rv\modules\packages\ie.py
C:\tmpd5tr1_rv\modules\packages\inp.py
C:\tmpd5tr1_rv\modules\packages\ichitaro.py
C:\tmpd5tr1_rv\modules\packages\ichitaro.py.basta
C:\tmpd5tr1_rv\modules\packages\ie.py.basta
C:\tmpd5tr1_rv\modules\packages\hta.py.basta
C:\tmpd5tr1_rv\modules\packages\js_antivm.py
C:\tmpd5tr1_rv\modules\packages\inp.py.basta
C:\tmpd5tr1_rv\modules\packages\lnk.py
C:\tmpd5tr1_rv\modules\packages\js.py
C:\tmpd5tr1_rv\modules\packages\js.py.basta
C:\tmpd5tr1_rv\modules\packages\mht.py
C:\tmpd5tr1_rv\modules\packages\msbuild.py
C:\tmpd5tr1_rv\modules\packages\lnk.py.basta
C:\tmpd5tr1_rv\modules\packages\jar.py
C:\tmpd5tr1_rv\modules\packages\jar.py.basta
C:\tmpd5tr1_rv\modules\packages\msg.py
C:\tmpd5tr1_rv\modules\packages\msbuild.py.basta
C:\tmpd5tr1_rv\modules\packages\msi.py
C:\tmpd5tr1_rv\modules\packages\msix.py
C:\tmpd5tr1_rv\modules\packages\js_antivm.py.basta
C:\tmpd5tr1_rv\modules\packages\msi.py.basta
C:\tmpd5tr1_rv\modules\__pycache__\*
C:\tmpd5tr1_rv\modules\packages\msg.py.basta
C:\tmpd5tr1_rv\modules\packages\nsis.py
C:\tmpd5tr1_rv\modules\packages\ollydbg.py
C:\tmpd5tr1_rv\modules\packages\nsis.py.basta
C:\tmpd5tr1_rv\modules\packages\one.py
C:\tmpd5tr1_rv\modules\packages\pdf.py
C:\tmpd5tr1_rv\modules\packages\ollydbg.py.basta
C:\tmpd5tr1_rv\modules\packages\ppt.py
C:\tmpd5tr1_rv\modules\packages\ppt2016.py
C:\tmpd5tr1_rv\tests\lib\*
C:\tmpd5tr1_rv\tests\lib\api\readme.txt
C:\tmpd5tr1_rv\tests\lib\common\readme.txt
C:\tmpd5tr1_rv\tests\modules\*
C:\tmpd5tr1_rv\tests\modules\packages\readme.txt
C:\tmpeoix3ml5\data\yara\*
C:\tmpd5tr1_rv\modules\packages\ps1.py
C:\tmpd5tr1_rv\modules\packages\pub.py
C:\tmpd5tr1_rv\modules\packages\ps1.py.basta
C:\tmpd5tr1_rv\modules\packages\pub2016.py
C:\tmpd5tr1_rv\modules\packages\python.py
C:\tmpd5tr1_rv\modules\packages\rar.py
C:\tmpd5tr1_rv\modules\packages\reg.py
C:\tmpd5tr1_rv\modules\packages\pub.py.basta
C:\tmpd5tr1_rv\modules\packages\regsvr.py
C:\tmpd5tr1_rv\modules\packages\sct.py
C:\tmpd5tr1_rv\modules\packages\reg.py.basta
C:\tmpd5tr1_rv\modules\packages\rar.py.basta
C:\tmpd5tr1_rv\modules\packages\service.py
C:\tmpd5tr1_rv\modules\packages\regsvr.py.basta
C:\tmpd5tr1_rv\modules\packages\service_dll.py
C:\tmpd5tr1_rv\modules\packages\sct.py.basta
C:\tmpd5tr1_rv\modules\packages\Shellcode-Unpacker.py
C:\tmpd5tr1_rv\modules\packages\Shellcode.py
C:\tmpd5tr1_rv\modules\packages\service.py.basta
C:\tmpd5tr1_rv\modules\packages\Shellcode_x64.py
C:\tmpd5tr1_rv\modules\packages\service_dll.py.basta
C:\tmpd5tr1_rv\modules\packages\Unpacker.py
C:\tmpd5tr1_rv\modules\packages\swf.py
C:\tmpd5tr1_rv\modules\packages\Unpacker_dll.py
C:\tmpd5tr1_rv\modules\packages\Unpacker_ps1.py
C:\tmpd5tr1_rv\modules\packages\Unpacker_dll.py.basta
C:\tmpd5tr1_rv\modules\packages\swf.py.basta
C:\tmpd5tr1_rv\modules\packages\vawtrak.py
C:\tmpd5tr1_rv\modules\packages\Unpacker.py.basta
C:\tmpd5tr1_rv\modules\packages\vbs.py
C:\tmpd5tr1_rv\modules\packages\wsf.py
C:\tmpd5tr1_rv\modules\packages\vbs.py.basta
C:\tmpd5tr1_rv\modules\packages\xls.py
C:\tmpd5tr1_rv\modules\packages\xls2016.py
C:\tmpd5tr1_rv\modules\packages\xps.py
C:\tmpd5tr1_rv\modules\packages\zip.py
C:\tmpd5tr1_rv\modules\packages\zip_compound.py
C:\tmpd5tr1_rv\modules\packages\xls2016.py.basta
C:\tmpd5tr1_rv\modules\packages\xps.py.basta
C:\tmpd5tr1_rv\modules\packages\__init__.py
C:\tmpd5tr1_rv\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\data\yara\AgentTesla.yar
C:\tmpeoix3ml5\data\yara\Al-khaser.yar
C:\tmpeoix3ml5\data\yara\AgentTesla.yar.basta
C:\tmpd5tr1_rv\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\data\yara\AntiCuckoo.yar
C:\tmpeoix3ml5\data\yara\Blister.yar
C:\tmpeoix3ml5\data\yara\BuerLoader.yar
C:\tmpeoix3ml5\data\yara\Al-khaser.yar.basta
C:\tmpeoix3ml5\data\yara\BumbleBee.yar
C:\tmpeoix3ml5\data\yara\capemon.yac
C:\tmpeoix3ml5\data\yara\CargoBayLoader.yar
C:\tmpeoix3ml5\data\yara\DarkGate.yar
C:\tmpeoix3ml5\data\yara\BuerLoader.yar.basta
C:\tmpeoix3ml5\data\yara\DarkGateLoader.yar
C:\tmpeoix3ml5\data\yara\DoomedLoader.yar
C:\tmpeoix3ml5\data\yara\DarkGateLoader.yar.basta
C:\tmpeoix3ml5\data\yara\DridexLoader.yar
C:\tmpeoix3ml5\data\yara\DarkGate.yar.basta
C:\tmpeoix3ml5\data\yara\EmotetPacker.yar
C:\tmpeoix3ml5\data\yara\capemon.yac.basta
C:\tmpeoix3ml5\data\yara\GetTickCountAntiVM.yar
C:\tmpeoix3ml5\data\yara\DridexLoader.yar.basta
C:\tmpeoix3ml5\data\yara\Formbook.yar
C:\tmpeoix3ml5\data\yara\Guloader.yar
C:\tmpeoix3ml5\data\yara\HeavensSyscall.yar
C:\tmpeoix3ml5\data\yara\Latrodectus.yar
C:\tmpeoix3ml5\data\yara\IcedID.yar
C:\tmpeoix3ml5\data\yara\ModiLoader.yar
C:\tmpeoix3ml5\data\yara\Latrodectus.yar.basta
C:\tmpeoix3ml5\data\yara\MysterySnail.yar
C:\tmpeoix3ml5\data\yara\IcedID.yar.basta
C:\tmpeoix3ml5\data\yara\Lumma.yar
C:\tmpeoix3ml5\data\yara\Lumma.yar.basta
C:\tmpeoix3ml5\data\yara\Guloader.yar.basta
C:\tmpeoix3ml5\data\yara\MysterySnail.yar.basta
C:\tmpeoix3ml5\data\yara\Pafish.yar
C:\tmpeoix3ml5\data\yara\NSIS.yar
C:\tmpeoix3ml5\data\yara\QakBot.yar
C:\tmpeoix3ml5\data\yara\Pafish.yar.basta
C:\tmpeoix3ml5\data\yara\RdtscpAntiVM.yar
C:\tmpeoix3ml5\data\yara\Rhadamanthys.yar
C:\tmpeoix3ml5\data\yara\Rhadamanthys.yar.basta
C:\tmpeoix3ml5\data\yara\VBCrypter.yar
C:\tmpeoix3ml5\data\yara\RdtscpAntiVM.yar.basta
C:\tmpeoix3ml5\data\yara\XWorm.yar
C:\tmpeoix3ml5\data\yara\Zloader.yar
C:\tmpeoix3ml5\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpeoix3ml5\lib\api\process.py
C:\tmpeoix3ml5\data\yara\Zloader.yar.basta
C:\tmpeoix3ml5\lib\api\screenshot.py
C:\tmpeoix3ml5\modules\auxiliary\*
C:\tmpeoix3ml5\lib\api\screenshot.py.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\readme.txt
C:\tmpeoix3ml5\lib\api\utils.py
C:\tmpeoix3ml5\lib\api\__init__.py
C:\tmpeoix3ml5\lib\common\abstracts.py
C:\tmpeoix3ml5\lib\common\common.py
C:\tmpeoix3ml5\lib\common\constants.py
C:\tmpeoix3ml5\lib\api\__init__.py.basta
C:\tmpeoix3ml5\lib\common\defines.py
C:\tmpeoix3ml5\lib\api\process.py.basta
C:\tmpeoix3ml5\lib\common\hashing.py
C:\tmpeoix3ml5\lib\common\defines.py.basta
C:\tmpeoix3ml5\lib\common\parse_pe.py
C:\tmpeoix3ml5\lib\common\rand.py
C:\tmpeoix3ml5\lib\common\registry.py
C:\tmpeoix3ml5\lib\common\__init__.py
C:\tmpeoix3ml5\lib\common\rand.py.basta
C:\tmpeoix3ml5\lib\core\compound.py
C:\tmpeoix3ml5\lib\core\compound.py.basta
C:\tmpeoix3ml5\lib\common\__init__.py.basta
C:\tmpeoix3ml5\lib\core\log.py
C:\tmpeoix3ml5\lib\core\config.py
C:\tmpeoix3ml5\lib\core\packages.py
C:\tmpeoix3ml5\lib\common\registry.py.basta
C:\tmpeoix3ml5\lib\common\zip_utils.py
C:\tmpeoix3ml5\lib\common\zip_utils.py.basta
C:\tmpeoix3ml5\lib\core\log.py.basta
C:\tmpeoix3ml5\lib\core\config.py.basta
C:\tmpeoix3ml5\lib\core\pipe.py
C:\tmpeoix3ml5\lib\core\privileges.py
C:\tmpeoix3ml5\lib\core\startup.py
C:\tmpeoix3ml5\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__init__.py
C:\tmpeoix3ml5\lib\core\packages.py.basta
C:\tmpeoix3ml5\modules\auxiliary\amsi.py
C:\tmpeoix3ml5\lib\core\startup.py.basta
C:\tmpeoix3ml5\lib\core\pipe.py.basta
C:\tmpeoix3ml5\modules\auxiliary\evtx.py
C:\tmpeoix3ml5\lib\core\__init__.py.basta
C:\tmpeoix3ml5\modules\auxiliary\filepickup.py
C:\tmpeoix3ml5\modules\auxiliary\disguise.py
C:\tmpeoix3ml5\modules\auxiliary\disguise.py.basta
C:\tmpeoix3ml5\modules\auxiliary\html_scraper.py
C:\tmpeoix3ml5\modules\auxiliary\human.py
C:\tmpeoix3ml5\modules\auxiliary\filepickup.py.basta
C:\tmpeoix3ml5\modules\auxiliary\permissions.py
C:\tmpeoix3ml5\modules\auxiliary\procmon.py
C:\tmpeoix3ml5\modules\auxiliary\recentfiles.py
C:\tmpeoix3ml5\modules\auxiliary\screenshots.py
C:\tmpeoix3ml5\modules\auxiliary\screenshots.py.basta
C:\tmpeoix3ml5\modules\auxiliary\sysmon.py
C:\tmpeoix3ml5\modules\auxiliary\procmon.py.basta
C:\tmpeoix3ml5\modules\auxiliary\tlsdump.py
C:\tmpeoix3ml5\modules\auxiliary\usage.py
C:\tmpeoix3ml5\modules\auxiliary\sysmon.py.basta
C:\tmpeoix3ml5\modules\auxiliary\__init__.py
C:\tmpeoix3ml5\modules\packages\access.py
C:\tmpeoix3ml5\modules\packages\applet.py
C:\tmpeoix3ml5\modules\packages\archive.py
C:\tmpeoix3ml5\modules\packages\autoit.py
C:\tmpeoix3ml5\modules\packages\applet.py.basta
C:\tmpeoix3ml5\modules\packages\chm.py
C:\tmpeoix3ml5\modules\packages\chrome.py
C:\tmpeoix3ml5\modules\packages\autoit.py.basta
C:\tmpeoix3ml5\modules\packages\chromium.py
C:\tmpeoix3ml5\modules\packages\archive.py.basta
C:\tmpeoix3ml5\modules\packages\chrome.py.basta
C:\tmpeoix3ml5\modules\packages\cpl.py
C:\tmpeoix3ml5\modules\packages\dll.py
C:\tmpeoix3ml5\modules\packages\doc.py
C:\tmpeoix3ml5\modules\packages\chm.py.basta
C:\tmpeoix3ml5\modules\packages\doc2016.py
C:\tmpeoix3ml5\modules\packages\edge.py
C:\tmpeoix3ml5\modules\packages\eml.py
C:\tmpeoix3ml5\modules\packages\edge.py.basta
C:\tmpeoix3ml5\modules\packages\exe.py
C:\tmpeoix3ml5\modules\packages\dll.py.basta
C:\tmpeoix3ml5\modules\packages\exe.py.basta
C:\tmpeoix3ml5\modules\packages\firefox.py
C:\tmpeoix3ml5\modules\packages\eml.py.basta
C:\tmpeoix3ml5\modules\packages\doc.py.basta
C:\tmpeoix3ml5\modules\packages\generic.py
C:\tmpeoix3ml5\modules\packages\hta.py
C:\tmpeoix3ml5\modules\packages\hwp.py
C:\tmpeoix3ml5\modules\packages\hta.py.basta
C:\tmpeoix3ml5\modules\packages\ichitaro.py
C:\tmpeoix3ml5\modules\packages\ie.py
C:\tmpeoix3ml5\modules\packages\inf.py
C:\tmpeoix3ml5\modules\packages\hwp.py.basta
C:\tmpeoix3ml5\modules\packages\inp.py
C:\tmpeoix3ml5\modules\packages\mht.py
C:\tmpeoix3ml5\modules\packages\mht.py.basta
C:\tmpeoix3ml5\modules\packages\msbuild.py
C:\tmpeoix3ml5\modules\packages\msg.py
C:\tmpeoix3ml5\modules\packages\inf.py.basta
C:\tmpeoix3ml5\modules\packages\msi.py
C:\tmpeoix3ml5\modules\packages\msi.py.basta
C:\tmpeoix3ml5\modules\packages\msix.py
C:\tmpeoix3ml5\modules\__pycache__\*
C:\tmpeoix3ml5\modules\packages\nsis.py
C:\tmpeoix3ml5\modules\packages\ollydbg.py
C:\tmpeoix3ml5\modules\packages\nsis.py.basta
C:\tmpeoix3ml5\modules\packages\one.py
C:\tmpeoix3ml5\modules\packages\pdf.py
C:\tmpeoix3ml5\tests\lib\api\readme.txt
C:\tmpeoix3ml5\tests\lib\common\readme.txt
C:\tmpeoix3ml5\tests\modules\*
C:\tmpeoix3ml5\tests\modules\packages\readme.txt
C:\tmph_w19omx\data\yara\*
C:\tmpeoix3ml5\modules\packages\ppt.py
C:\tmpeoix3ml5\modules\packages\pdf.py.basta
C:\tmpeoix3ml5\modules\packages\ppt2016.py
C:\tmpeoix3ml5\modules\packages\ppt.py.basta
C:\tmpeoix3ml5\modules\packages\ppt2016.py.basta
C:\tmpeoix3ml5\modules\packages\ps1.py
C:\tmpeoix3ml5\modules\packages\pub.py
C:\tmpeoix3ml5\modules\packages\pub2016.py
C:\tmpeoix3ml5\modules\packages\python.py
C:\tmpeoix3ml5\modules\packages\ps1.py.basta
C:\tmpeoix3ml5\modules\packages\rar.py
C:\tmpeoix3ml5\modules\packages\pub.py.basta
C:\tmpeoix3ml5\modules\packages\reg.py
C:\tmpeoix3ml5\modules\packages\pub2016.py.basta
C:\tmpeoix3ml5\modules\packages\regsvr.py
C:\tmpeoix3ml5\modules\packages\reg.py.basta
C:\tmpeoix3ml5\modules\packages\service.py
C:\tmpeoix3ml5\modules\packages\sct.py
C:\tmpeoix3ml5\modules\packages\Shellcode-Unpacker.py
C:\tmpeoix3ml5\modules\packages\service_dll.py
C:\tmpeoix3ml5\modules\packages\service_dll.py.basta
C:\tmpeoix3ml5\modules\packages\Shellcode.py
C:\tmpeoix3ml5\modules\packages\sct.py.basta
C:\tmpeoix3ml5\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpeoix3ml5\modules\packages\service.py.basta
C:\tmpeoix3ml5\modules\packages\Shellcode_x64.py
C:\tmpeoix3ml5\modules\packages\swf.py
C:\tmpeoix3ml5\modules\packages\Unpacker.py
C:\tmpeoix3ml5\modules\packages\Unpacker_dll.py
C:\tmpeoix3ml5\modules\packages\Unpacker_js.py
C:\tmpeoix3ml5\modules\packages\swf.py.basta
C:\tmpeoix3ml5\modules\packages\Unpacker_ps1.py
C:\tmpeoix3ml5\modules\packages\Unpacker_regsvr.py
C:\tmpeoix3ml5\modules\packages\firefox.py.basta
C:\tmpeoix3ml5\modules\packages\Unpacker_zip.py
C:\tmpeoix3ml5\modules\packages\vawtrak.py
C:\tmpeoix3ml5\modules\packages\Unpacker_regsvr.py.basta
C:\tmpeoix3ml5\modules\packages\vbejse.py
C:\tmpeoix3ml5\modules\packages\vbs.py
C:\tmpeoix3ml5\modules\packages\wsf.py
C:\tmpeoix3ml5\modules\packages\vbs.py.basta
C:\tmpeoix3ml5\modules\packages\xls.py
C:\tmpeoix3ml5\modules\packages\wsf.py.basta
C:\tmpeoix3ml5\modules\packages\xls2016.py
C:\tmpeoix3ml5\modules\packages\xls.py.basta
C:\tmpeoix3ml5\modules\packages\xps.py
C:\tmpeoix3ml5\modules\packages\xls2016.py.basta
C:\tmpeoix3ml5\modules\packages\xslt.py
C:\tmpeoix3ml5\modules\packages\xps.py.basta
C:\tmpeoix3ml5\modules\packages\zip.py
C:\tmpeoix3ml5\modules\packages\xslt.py.basta
C:\tmpeoix3ml5\modules\packages\zip_compound.py
C:\tmpeoix3ml5\modules\packages\zip.py.basta
C:\tmpeoix3ml5\modules\packages\__init__.py
C:\tmpeoix3ml5\modules\packages\zip_compound.py.basta
C:\tmpeoix3ml5\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__init__.py.basta
C:\tmph_w19omx\data\yara\AgentTesla.yar
C:\tmph_w19omx\lib\api\__pycache__\readme.txt
C:\tmph_w19omx\data\yara\Al-khaser.yar
C:\tmph_w19omx\data\yara\AgentTesla.yar.basta
C:\tmph_w19omx\data\yara\AntiCuckoo.yar
C:\tmph_w19omx\data\yara\Al-khaser.yar.basta
C:\tmph_w19omx\data\yara\Blister.yar
C:\tmph_w19omx\data\yara\AntiCuckoo.yar.basta
C:\tmph_w19omx\data\yara\BuerLoader.yar
C:\tmph_w19omx\data\yara\Blister.yar.basta
C:\tmph_w19omx\data\yara\BuerLoader.yar.basta
C:\tmph_w19omx\data\yara\BumbleBee.yar
C:\tmph_w19omx\data\yara\capemon.yac
C:\tmph_w19omx\data\yara\BumbleBee.yar.basta
C:\tmph_w19omx\data\yara\CargoBayLoader.yar
C:\tmph_w19omx\data\yara\CargoBayLoader.yar.basta
C:\tmph_w19omx\data\yara\DarkGate.yar
C:\tmph_w19omx\lib\common\*
C:\tmph_w19omx\data\yara\DarkGate.yar.basta
C:\tmph_w19omx\lib\common\__pycache__\readme.txt
C:\tmph_w19omx\data\yara\DarkGateLoader.yar
C:\tmph_w19omx\data\yara\DarkGateLoader.yar.basta
C:\tmph_w19omx\data\yara\DoomedLoader.yar
C:\tmph_w19omx\data\yara\DoomedLoader.yar.basta
C:\tmph_w19omx\data\yara\DridexLoader.yar
C:\tmph_w19omx\data\yara\DridexLoader.yar.basta
C:\tmph_w19omx\data\yara\EmotetPacker.yar
C:\tmph_w19omx\data\yara\EmotetPacker.yar.basta
C:\tmph_w19omx\data\yara\Formbook.yar
C:\tmph_w19omx\data\yara\Formbook.yar.basta
C:\tmph_w19omx\data\yara\GetTickCountAntiVM.yar
C:\tmph_w19omx\data\yara\GetTickCountAntiVM.yar.basta
C:\tmph_w19omx\data\yara\Guloader.yar
C:\tmph_w19omx\data\yara\Guloader.yar.basta
C:\tmph_w19omx\data\yara\HeavensSyscall.yar
C:\tmph_w19omx\data\yara\capemon.yac.basta
C:\tmph_w19omx\data\yara\HeavensSyscall.yar.basta
C:\tmph_w19omx\lib\core\*
C:\tmph_w19omx\data\yara\IcedID.yar
C:\tmph_w19omx\data\yara\Latrodectus.yar
C:\tmph_w19omx\lib\core\__pycache__\readme.txt
C:\tmph_w19omx\data\yara\Latrodectus.yar.basta
C:\tmph_w19omx\data\yara\Lumma.yar
C:\tmph_w19omx\data\yara\Lumma.yar.basta
C:\tmph_w19omx\data\yara\ModiLoader.yar
C:\tmph_w19omx\data\yara\ModiLoader.yar.basta
C:\tmph_w19omx\data\yara\MysterySnail.yar
C:\tmph_w19omx\data\yara\MysterySnail.yar.basta
C:\tmph_w19omx\data\yara\NSIS.yar
C:\tmph_w19omx\data\yara\IcedID.yar.basta
C:\tmph_w19omx\data\yara\Pafish.yar
C:\tmph_w19omx\data\yara\Pikabot.yar
C:\tmph_w19omx\data\yara\Pafish.yar.basta
C:\tmph_w19omx\data\yara\QakBot.yar
C:\tmph_w19omx\data\yara\RdtscpAntiVM.yar
C:\tmph_w19omx\data\yara\QakBot.yar.basta
C:\tmph_w19omx\data\yara\Rhadamanthys.yar
C:\tmph_w19omx\data\yara\RdtscpAntiVM.yar.basta
C:\tmph_w19omx\data\yara\RisePro.yar
C:\tmph_w19omx\data\yara\SingleStepAntiHook.yar
C:\tmph_w19omx\modules\auxiliary\*
C:\tmph_w19omx\data\yara\RisePro.yar.basta
C:\tmph_w19omx\modules\auxiliary\__pycache__\readme.txt
C:\tmph_w19omx\data\yara\SmokeLoader.yar
C:\tmph_w19omx\data\yara\Socks5Systemz.yar
C:\tmph_w19omx\data\yara\SmokeLoader.yar.basta
C:\tmph_w19omx\data\yara\Stealc.yar
C:\tmph_w19omx\data\yara\Socks5Systemz.yar.basta
C:\tmph_w19omx\data\yara\Syscall.yar
C:\tmph_w19omx\data\yara\Stealc.yar.basta
C:\tmph_w19omx\data\yara\UPX.yar
C:\tmpeoix3ml5\modules\packages\Unpacker.py.basta
C:\tmph_w19omx\data\yara\UrsnifV3.yar
C:\tmpeoix3ml5\modules\packages\Unpacker_dll.py.basta
C:\tmph_w19omx\data\yara\VBCrypter.yar
C:\tmpeoix3ml5\modules\packages\vbejse.py.basta
C:\tmph_w19omx\data\yara\UrsnifV3.yar.basta
C:\tmph_w19omx\data\yara\XWorm.yar
C:\tmph_w19omx\data\yara\VBCrypter.yar.basta
C:\tmph_w19omx\data\yara\Zloader.yar
C:\tmph_w19omx\lib\api\process.py
C:\tmph_w19omx\data\yara\XWorm.yar.basta
C:\tmph_w19omx\lib\api\screenshot.py
C:\tmph_w19omx\data\yara\Zloader.yar.basta
C:\tmph_w19omx\lib\api\utils.py
C:\tmph_w19omx\lib\api\utils.py.basta
C:\tmph_w19omx\lib\api\__init__.py
C:\tmph_w19omx\lib\api\screenshot.py.basta
C:\tmph_w19omx\lib\common\abstracts.py
C:\tmph_w19omx\data\yara\UPX.yar.basta
C:\tmph_w19omx\lib\common\common.py
C:\tmpeoix3ml5\modules\packages\Unpacker_js.py.basta
C:\tmph_w19omx\lib\common\constants.py
C:\tmph_w19omx\lib\common\abstracts.py.basta
C:\tmph_w19omx\lib\common\defines.py
C:\tmph_w19omx\lib\common\common.py.basta
C:\tmph_w19omx\lib\common\errors.py
C:\tmph_w19omx\data\yara\Syscall.yar.basta
C:\tmph_w19omx\lib\common\exceptions.py
C:\tmph_w19omx\lib\common\constants.py.basta
C:\tmph_w19omx\lib\common\hashing.py
C:\tmph_w19omx\lib\common\exceptions.py.basta
C:\tmph_w19omx\lib\common\parse_pe.py
C:\tmph_w19omx\lib\common\hashing.py.basta
C:\tmph_w19omx\lib\common\rand.py
C:\tmph_w19omx\lib\common\defines.py.basta
C:\tmph_w19omx\lib\common\registry.py
C:\tmph_w19omx\modules\packages\*
C:\tmph_w19omx\lib\common\results.py
C:\tmph_w19omx\lib\common\zip_utils.py
C:\tmph_w19omx\lib\common\zip_utils.py.basta
C:\tmph_w19omx\lib\common\rand.py.basta
C:\tmph_w19omx\lib\core\packages.py
C:\tmph_w19omx\lib\core\pipe.py
C:\tmph_w19omx\lib\core\log.py
C:\tmph_w19omx\lib\core\log.py.basta
C:\tmph_w19omx\modules\packages\__pycache__\readme.txt
C:\tmph_w19omx\lib\core\privileges.py
C:\tmph_w19omx\lib\core\privileges.py.basta
C:\tmph_w19omx\lib\core\packages.py.basta
C:\tmph_w19omx\lib\core\startup.py
C:\tmph_w19omx\lib\core\__init__.py
C:\tmph_w19omx\lib\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\modules\auxiliary\amsi.py
C:\tmph_w19omx\modules\auxiliary\amsi_collector.py
C:\tmph_w19omx\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\modules\auxiliary\autoruns.py
C:\tmph_w19omx\modules\auxiliary\amsi_collector.py.basta
C:\tmph_w19omx\modules\auxiliary\browser.py
C:\tmph_w19omx\lib\core\pipe.py.basta
C:\tmph_w19omx\modules\auxiliary\curtain.py
C:\tmph_w19omx\modules\auxiliary\autoruns.py.basta
C:\tmph_w19omx\modules\auxiliary\digisig.py
C:\tmph_w19omx\modules\auxiliary\curtain.py.basta
C:\tmph_w19omx\modules\auxiliary\during_script.py
C:\tmph_w19omx\modules\auxiliary\browser.py.basta
C:\tmph_w19omx\modules\auxiliary\evtx.py
C:\tmph_w19omx\modules\auxiliary\filepickup.py
C:\tmph_w19omx\modules\auxiliary\html_scraper.py
C:\tmph_w19omx\modules\auxiliary\digisig.py.basta
C:\tmph_w19omx\modules\auxiliary\permissions.py
C:\tmph_w19omx\modules\auxiliary\human.py
C:\tmph_w19omx\modules\auxiliary\recentfiles.py
C:\tmph_w19omx\modules\auxiliary\recentfiles.py.basta
C:\tmph_w19omx\modules\auxiliary\screenshots.py
C:\tmph_w19omx\modules\auxiliary\procmon.py
C:\tmph_w19omx\modules\auxiliary\evtx.py.basta
C:\tmph_w19omx\modules\auxiliary\sysmon.py
C:\tmph_w19omx\modules\auxiliary\screenshots.py.basta
C:\tmph_w19omx\modules\auxiliary\tlsdump.py
C:\tmph_w19omx\modules\auxiliary\usage.py
C:\tmph_w19omx\modules\auxiliary\__init__.py
C:\tmph_w19omx\modules\packages\access.py
C:\tmph_w19omx\modules\packages\applet.py
C:\tmph_w19omx\modules\packages\archive.py
C:\tmph_w19omx\modules\auxiliary\__init__.py.basta
C:\tmph_w19omx\modules\packages\access.py.basta
C:\tmph_w19omx\modules\packages\autoit.py
C:\tmph_w19omx\modules\packages\archive.py.basta
C:\tmph_w19omx\modules\packages\chm.py
C:\tmph_w19omx\modules\packages\autoit.py.basta
C:\tmph_w19omx\modules\packages\chm.py.basta
C:\tmph_w19omx\modules\packages\chrome.py
C:\tmph_w19omx\modules\packages\chromium.py
C:\tmph_w19omx\modules\packages\cpl.py
C:\tmph_w19omx\modules\packages\chromium.py.basta
C:\tmph_w19omx\modules\packages\dll.py
C:\tmph_w19omx\modules\packages\doc.py
C:\tmph_w19omx\modules\packages\cpl.py.basta
C:\tmph_w19omx\modules\packages\doc2016.py
C:\tmph_w19omx\modules\packages\doc_antivm.py
C:\tmph_w19omx\modules\packages\edge.py
C:\tmph_w19omx\modules\packages\doc.py.basta
C:\tmph_w19omx\modules\packages\doc2016.py.basta
C:\tmph_w19omx\modules\packages\eml.py
C:\tmph_w19omx\modules\packages\doc_antivm.py.basta
C:\tmph_w19omx\modules\packages\exe.py
C:\tmph_w19omx\modules\packages\firefox.py
C:\tmph_w19omx\modules\packages\dll.py.basta
C:\tmph_w19omx\modules\packages\hta.py
C:\tmph_w19omx\modules\packages\hwp.py
C:\tmph_w19omx\modules\packages\firefox.py.basta
C:\tmph_w19omx\modules\packages\generic.py
C:\tmph_w19omx\modules\packages\generic.py.basta
C:\tmph_w19omx\modules\packages\ichitaro.py
C:\tmph_w19omx\modules\packages\hta.py.basta
C:\tmph_w19omx\modules\packages\ie.py
C:\tmph_w19omx\modules\packages\inf.py
C:\tmph_w19omx\modules\packages\inp.py
C:\tmph_w19omx\modules\packages\jar.py
C:\tmph_w19omx\modules\packages\ie.py.basta
C:\tmph_w19omx\modules\packages\inf.py.basta
C:\tmph_w19omx\modules\packages\js.py
C:\tmph_w19omx\modules\packages\inp.py.basta
C:\tmph_w19omx\modules\packages\js_antivm.py
C:\tmph_w19omx\modules\packages\jar.py.basta
C:\tmph_w19omx\modules\packages\lnk.py
C:\tmph_w19omx\modules\packages\js.py.basta
C:\tmph_w19omx\modules\packages\mht.py
C:\tmph_w19omx\modules\packages\lnk.py.basta
C:\tmph_w19omx\modules\packages\msbuild.py
C:\tmph_w19omx\modules\packages\msg.py
C:\tmph_w19omx\modules\packages\msi.py
C:\tmph_w19omx\modules\packages\mht.py.basta
C:\tmph_w19omx\modules\packages\msg.py.basta
C:\tmph_w19omx\modules\packages\msix.py
C:\tmph_w19omx\modules\packages\msbuild.py.basta
C:\tmph_w19omx\modules\packages\pub2016.py
C:\tmph_w19omx\modules\packages\pub2016.py.basta
C:\tmph_w19omx\modules\packages\python.py
C:\tmph_w19omx\tests\lib\*
C:\tmph_w19omx\modules\packages\rar.py
C:\tmph_w19omx\modules\packages\reg.py
C:\tmph_w19omx\modules\packages\python.py.basta
C:\tmph_w19omx\modules\packages\regsvr.py
C:\tmph_w19omx\tests\lib\common\readme.txt
C:\tmph_w19omx\tests\modules\*
C:\tmph_w19omx\modules\packages\rar.py.basta
C:\tmph_w19omx\tests\modules\packages\readme.txt
C:\tmph_w19omx\modules\packages\reg.py.basta
C:\tmph_w19omx\modules\packages\Shellcode-Unpacker.py
C:\tmph_w19omx\modules\packages\Shellcode-Unpacker.py.basta
C:\tmph_w19omx\modules\packages\service_dll.py
C:\tmph_w19omx\modules\packages\service_dll.py.basta
C:\tmph_w19omx\modules\packages\Shellcode_x64.py
C:\tmph_w19omx\modules\packages\service.py
C:\tmph_w19omx\modules\packages\service.py.basta
C:\tmph_w19omx\modules\packages\Shellcode.py
C:\tmph_w19omx\modules\packages\Shellcode.py.basta
C:\tmph_w19omx\modules\packages\swf.py
C:\tmph_w19omx\modules\packages\Shellcode_x64.py.basta
C:\tmph_w19omx\modules\packages\Unpacker.py
C:\tmph_w19omx\modules\packages\Unpacker_dll.py
C:\tmph_w19omx\modules\packages\Unpacker_js.py
C:\tmph_w19omx\modules\packages\Unpacker.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_ps1.py
C:\tmph_w19omx\modules\packages\Unpacker_dll.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_regsvr.py
C:\tmph_w19omx\modules\packages\Unpacker_js.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_zip.py
C:\tmph_w19omx\modules\packages\Unpacker_ps1.py.basta
C:\tmph_w19omx\modules\packages\vawtrak.py
C:\tmph_w19omx\modules\packages\vbejse.py
C:\tmph_w19omx\modules\packages\Unpacker_zip.py.basta
C:\tmph_w19omx\modules\packages\vbs.py
C:\tmph_w19omx\modules\packages\wsf.py
C:\tmph_w19omx\modules\packages\vawtrak.py.basta
C:\tmph_w19omx\modules\packages\xls.py
C:\tmph_w19omx\modules\packages\xls2016.py
C:\tmph_w19omx\modules\packages\vbs.py.basta
C:\tmph_w19omx\modules\packages\xps.py
C:\tmph_w19omx\modules\packages\xslt.py
C:\tmph_w19omx\modules\packages\xls.py.basta
C:\tmph_w19omx\modules\packages\zip.py
C:\tmpsv59hb03\lib\api\*
C:\tmph_w19omx\modules\packages\zip_compound.py
C:\tmpsv59hb03\lib\api\__pycache__\readme.txt
C:\tmph_w19omx\modules\packages\xslt.py.basta
C:\tmph_w19omx\modules\packages\__init__.py
C:\tmph_w19omx\modules\packages\zip.py.basta
C:\tmph_w19omx\modules\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\modules\packages\__init__.py.basta
C:\tmpsv59hb03\data\yara\AgentTesla.yar
C:\tmpsv59hb03\data\yara\Al-khaser.yar
C:\tmph_w19omx\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpsv59hb03\data\yara\AntiCuckoo.yar
C:\tmpsv59hb03\data\yara\AgentTesla.yar.basta
C:\tmpsv59hb03\data\yara\Blister.yar
C:\tmpsv59hb03\data\yara\BuerLoader.yar
C:\tmpsv59hb03\data\yara\AntiCuckoo.yar.basta
C:\tmpsv59hb03\data\yara\BumbleBee.yar
C:\tmpsv59hb03\data\yara\BuerLoader.yar.basta
C:\tmpsv59hb03\data\yara\CargoBayLoader.yar
C:\tmpsv59hb03\data\yara\Blister.yar.basta
C:\tmpsv59hb03\data\yara\BumbleBee.yar.basta
C:\tmpsv59hb03\lib\common\*
C:\tmpsv59hb03\data\yara\DarkGateLoader.yar
C:\tmpsv59hb03\data\yara\DarkGate.yar
C:\tmpsv59hb03\data\yara\CargoBayLoader.yar.basta
C:\tmpsv59hb03\data\yara\DoomedLoader.yar
C:\tmpsv59hb03\data\yara\DarkGateLoader.yar.basta
C:\tmpsv59hb03\data\yara\DarkGate.yar.basta
C:\tmpsv59hb03\data\yara\DridexLoader.yar
C:\tmpsv59hb03\data\yara\EmotetPacker.yar
C:\tmpsv59hb03\data\yara\DoomedLoader.yar.basta
C:\tmpsv59hb03\data\yara\Formbook.yar
C:\tmpsv59hb03\data\yara\GetTickCountAntiVM.yar
C:\tmpsv59hb03\data\yara\Guloader.yar
C:\tmpsv59hb03\data\yara\Formbook.yar.basta
C:\tmpsv59hb03\data\yara\HeavensSyscall.yar
C:\tmpsv59hb03\data\yara\IcedID.yar
C:\tmpsv59hb03\data\yara\Guloader.yar.basta
C:\tmpsv59hb03\data\yara\Latrodectus.yar
C:\tmpsv59hb03\data\yara\HeavensSyscall.yar.basta
C:\tmpsv59hb03\lib\core\*
C:\tmpsv59hb03\data\yara\IcedID.yar.basta
C:\tmpsv59hb03\data\yara\Lumma.yar
C:\tmpsv59hb03\data\yara\Latrodectus.yar.basta
C:\tmpsv59hb03\lib\core\__pycache__\readme.txt
C:\tmpsv59hb03\data\yara\ModiLoader.yar
C:\tmpsv59hb03\data\yara\MysterySnail.yar
C:\tmpsv59hb03\data\yara\NSIS.yar
C:\tmpsv59hb03\data\yara\Pafish.yar
C:\tmpsv59hb03\data\yara\MysterySnail.yar.basta
C:\tmpsv59hb03\data\yara\Pikabot.yar
C:\tmpsv59hb03\data\yara\NSIS.yar.basta
C:\tmpsv59hb03\data\yara\QakBot.yar
C:\tmpsv59hb03\data\yara\RdtscpAntiVM.yar
C:\tmpsv59hb03\data\yara\Pikabot.yar.basta
C:\tmpsv59hb03\data\yara\Rhadamanthys.yar
C:\tmpsv59hb03\data\yara\QakBot.yar.basta
C:\tmpsv59hb03\data\yara\RisePro.yar
C:\tmpsv59hb03\data\yara\SmokeLoader.yar
C:\tmpsv59hb03\data\yara\SingleStepAntiHook.yar
C:\tmpsv59hb03\modules\auxiliary\__pycache__\readme.txt
C:\tmpsv59hb03\data\yara\RisePro.yar.basta
C:\tmpsv59hb03\data\yara\Socks5Systemz.yar
C:\tmpsv59hb03\data\yara\Stealc.yar
C:\tmpsv59hb03\data\yara\SingleStepAntiHook.yar.basta
C:\tmpsv59hb03\data\yara\Syscall.yar
C:\tmpsv59hb03\data\yara\Socks5Systemz.yar.basta
C:\tmpsv59hb03\data\yara\UPX.yar
C:\tmpsv59hb03\data\yara\Stealc.yar.basta
C:\tmpsv59hb03\data\yara\UrsnifV3.yar
C:\tmpsv59hb03\data\yara\VBCrypter.yar
C:\tmpsv59hb03\data\yara\UPX.yar.basta
C:\tmpsv59hb03\data\yara\XWorm.yar
C:\tmpsv59hb03\data\yara\UrsnifV3.yar.basta
C:\tmpsv59hb03\data\yara\Zloader.yar
C:\tmpsv59hb03\lib\api\process.py
C:\tmpsv59hb03\data\yara\XWorm.yar.basta
C:\tmpsv59hb03\lib\api\screenshot.py
C:\tmpsv59hb03\data\yara\Zloader.yar.basta
C:\tmpsv59hb03\lib\api\utils.py
C:\tmpsv59hb03\lib\api\screenshot.py.basta
C:\tmpsv59hb03\lib\api\__init__.py
C:\tmpsv59hb03\lib\api\utils.py.basta
C:\tmpsv59hb03\lib\common\abstracts.py
C:\tmpsv59hb03\lib\api\__init__.py.basta
C:\tmpsv59hb03\lib\common\common.py
C:\tmpsv59hb03\lib\api\process.py.basta
C:\tmpsv59hb03\lib\common\constants.py
C:\tmpsv59hb03\lib\common\common.py.basta
C:\tmpsv59hb03\lib\common\defines.py
C:\tmpsv59hb03\lib\common\abstracts.py.basta
C:\tmpsv59hb03\lib\common\errors.py
C:\tmpsv59hb03\lib\common\constants.py.basta
C:\tmpsv59hb03\lib\common\exceptions.py
C:\tmpsv59hb03\lib\common\hashing.py
C:\tmpsv59hb03\modules\packages
C:\tmpsv59hb03\modules\packages\*
C:\tmpsv59hb03\lib\common\exceptions.py.basta
C:\tmpsv59hb03\lib\common\hashing.py.basta
C:\tmpsv59hb03\modules\packages\__pycache__\readme.txt
C:\tmpsv59hb03\lib\common\parse_pe.py
C:\tmpsv59hb03\lib\common\rand.py
C:\tmpsv59hb03\lib\common\errors.py.basta
C:\tmpsv59hb03\lib\common\rand.py.basta
C:\tmpsv59hb03\lib\common\registry.py
C:\tmpsv59hb03\lib\common\results.py
C:\tmpsv59hb03\lib\common\registry.py.basta
C:\tmpsv59hb03\lib\common\zip_utils.py
C:\tmpsv59hb03\lib\common\results.py.basta
C:\tmpsv59hb03\lib\common\__init__.py
C:\tmpsv59hb03\lib\common\__init__.py.basta
C:\tmpsv59hb03\lib\core\compound.py
C:\tmpsv59hb03\lib\core\compound.py.basta
C:\tmpsv59hb03\lib\core\config.py
C:\tmpsv59hb03\lib\common\zip_utils.py.basta
C:\tmpsv59hb03\lib\core\log.py
C:\tmpsv59hb03\lib\core\config.py.basta
C:\tmpsv59hb03\lib\core\packages.py
C:\tmpsv59hb03\lib\core\log.py.basta
C:\tmpsv59hb03\lib\core\pipe.py
C:\tmpsv59hb03\lib\core\packages.py.basta
C:\tmpsv59hb03\lib\core\privileges.py
C:\tmpsv59hb03\lib\core\privileges.py.basta
C:\tmpsv59hb03\lib\core\startup.py
C:\tmpsv59hb03\lib\core\pipe.py.basta
C:\tmpsv59hb03\lib\core\__init__.py
C:\tmpsv59hb03\lib\core\__init__.py.basta
C:\tmpsv59hb03\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpsv59hb03\lib\core\startup.py.basta
C:\tmpsv59hb03\modules\auxiliary\amsi.py
C:\tmpsv59hb03\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpsv59hb03\modules\auxiliary\amsi_collector.py
C:\tmpsv59hb03\modules\auxiliary\amsi_collector.py.basta
C:\tmpsv59hb03\modules\auxiliary\autoruns.py
C:\tmpsv59hb03\modules\auxiliary\autoruns.py.basta
C:\tmpsv59hb03\modules\auxiliary\browser.py
C:\tmpsv59hb03\modules\auxiliary\browser.py.basta
C:\tmpsv59hb03\modules\auxiliary\curtain.py
C:\tmpsv59hb03\modules\auxiliary\curtain.py.basta
C:\tmpsv59hb03\modules\auxiliary\digisig.py
C:\tmpsv59hb03\modules\auxiliary\digisig.py.basta
C:\tmpsv59hb03\modules\auxiliary\disguise.py
C:\tmpsv59hb03\modules\auxiliary\amsi.py.basta
C:\tmpsv59hb03\modules\auxiliary\during_script.py
C:\tmpsv59hb03\modules\auxiliary\disguise.py.basta
C:\tmpsv59hb03\modules\auxiliary\evtx.py
C:\tmpsv59hb03\modules\auxiliary\during_script.py.basta
C:\tmpsv59hb03\modules\auxiliary\filepickup.py
C:\tmpsv59hb03\modules\auxiliary\filepickup.py.basta
C:\tmpsv59hb03\modules\auxiliary\html_scraper.py
C:\tmpsv59hb03\modules\auxiliary\evtx.py.basta
C:\tmpsv59hb03\modules\auxiliary\human.py
C:\tmpsv59hb03\modules\auxiliary\html_scraper.py.basta
C:\tmpsv59hb03\modules\auxiliary\permissions.py
C:\tmpsv59hb03\modules\auxiliary\permissions.py.basta
C:\tmpsv59hb03\modules\auxiliary\pre_script.py
C:\tmpsv59hb03\modules\auxiliary\human.py.basta
C:\tmpsv59hb03\modules\auxiliary\pre_script.py.basta
C:\tmpsv59hb03\modules\auxiliary\procmon.py
C:\tmpsv59hb03\modules\auxiliary\recentfiles.py
C:\tmpsv59hb03\modules\auxiliary\procmon.py.basta
C:\tmpsv59hb03\modules\auxiliary\recentfiles.py.basta
C:\tmpsv59hb03\modules\auxiliary\screenshots.py
C:\tmpsv59hb03\modules\auxiliary\sysmon.py
C:\tmpsv59hb03\modules\auxiliary\screenshots.py.basta
C:\tmpsv59hb03\modules\auxiliary\tlsdump.py
C:\tmpsv59hb03\modules\auxiliary\sysmon.py.basta
C:\tmpsv59hb03\modules\auxiliary\usage.py
C:\tmpsv59hb03\modules\auxiliary\tlsdump.py.basta
C:\tmpsv59hb03\modules\auxiliary\__init__.py
C:\tmpsv59hb03\modules\auxiliary\__init__.py.basta
C:\tmpsv59hb03\modules\packages\access.py
C:\tmpsv59hb03\modules\auxiliary\usage.py.basta
C:\tmpsv59hb03\modules\packages\applet.py
C:\tmpsv59hb03\modules\packages\access.py.basta
C:\tmpsv59hb03\modules\packages\archive.py
C:\tmpsv59hb03\modules\packages\applet.py.basta
C:\tmpsv59hb03\modules\packages\autoit.py
C:\tmpsv59hb03\modules\packages\autoit.py.basta
C:\tmpsv59hb03\modules\packages\chm.py
C:\tmpsv59hb03\modules\packages\chrome.py
C:\tmpsv59hb03\modules\packages\chm.py.basta
C:\tmpsv59hb03\modules\packages\chromium.py
C:\tmpsv59hb03\modules\packages\chrome.py.basta
C:\tmpsv59hb03\modules\packages\chromium.py.basta
C:\tmpsv59hb03\modules\packages\cpl.py
C:\tmpsv59hb03\modules\packages\cpl.py.basta
C:\tmpsv59hb03\modules\packages\doc.py
C:\tmpsv59hb03\modules\packages\doc.py.basta
C:\tmpsv59hb03\modules\packages\doc2016.py
C:\tmpsv59hb03\modules\packages\doc_antivm.py
C:\tmpsv59hb03\modules\packages\doc2016.py.basta
C:\tmpsv59hb03\modules\packages\edge.py
C:\tmpsv59hb03\modules\packages\eml.py
C:\tmpsv59hb03\modules\packages\edge.py.basta
C:\tmpsv59hb03\modules\packages\exe.py
C:\tmpsv59hb03\modules\packages\firefox.py
C:\tmpsv59hb03\modules\packages\exe.py.basta
C:\tmpsv59hb03\modules\packages\generic.py
C:\tmpsv59hb03\modules\packages\firefox.py.basta
C:\tmpsv59hb03\modules\packages\hta.py
C:\tmpsv59hb03\modules\packages\generic.py.basta
C:\tmpsv59hb03\modules\packages\hwp.py
C:\tmpsv59hb03\modules\packages\hta.py.basta
C:\tmpsv59hb03\modules\packages\hwp.py.basta
C:\tmpsv59hb03\modules\packages\ie.py
C:\tmpsv59hb03\modules\packages\ichitaro.py
C:\tmpsv59hb03\modules\packages\ichitaro.py.basta
C:\tmpsv59hb03\modules\packages\ie.py.basta
C:\tmpsv59hb03\modules\packages\inf.py
C:\tmpsv59hb03\modules\packages\inp.py
C:\tmpsv59hb03\modules\packages\inf.py.basta
C:\tmpsv59hb03\modules\packages\jar.py
C:\tmpsv59hb03\modules\packages\js.py
C:\tmpsv59hb03\modules\packages\jar.py.basta
C:\tmpsv59hb03\modules\packages\js_antivm.py
C:\tmpsv59hb03\modules\packages\lnk.py
C:\tmpsv59hb03\modules\packages\js_antivm.py.basta
C:\tmpsv59hb03\modules\packages\mht.py
C:\tmpsv59hb03\modules\packages\lnk.py.basta
C:\tmpsv59hb03\modules\packages\msbuild.py
C:\tmpsv59hb03\modules\packages\mht.py.basta
C:\tmpsv59hb03\modules\packages\msbuild.py.basta
C:\tmpsv59hb03\modules\packages\msg.py
C:\tmpsv59hb03\modules\packages\msi.py
C:\tmpsv59hb03\modules\packages\msg.py.basta
C:\tmpsv59hb03\modules\packages\msix.py
C:\tmpsv59hb03\modules\packages\msi.py.basta
C:\tmpsv59hb03\modules\packages\nsis.py
C:\tmpsv59hb03\modules\packages\msix.py.basta
C:\tmpsv59hb03\modules\packages\ollydbg.py
C:\tmpsv59hb03\modules\packages\nsis.py.basta
C:\tmpsv59hb03\tests\lib\common\readme.txt
C:\tmpsv59hb03\tests\modules\*
C:\tmpsv59hb03\tests\modules\packages\readme.txt
C:\tmpugscyilj\data\yara\*
C:\tmpsv59hb03\modules\packages\one.py
C:\tmpsv59hb03\modules\packages\pdf.py
C:\tmpsv59hb03\modules\packages\one.py.basta
C:\tmpsv59hb03\modules\packages\ppt.py
C:\tmpsv59hb03\modules\packages\pdf.py.basta
C:\tmpsv59hb03\modules\packages\ppt2016.py
C:\tmpsv59hb03\modules\packages\ppt.py.basta
C:\tmpsv59hb03\modules\packages\ps1.py
C:\tmpsv59hb03\modules\packages\ppt2016.py.basta
C:\tmpsv59hb03\modules\packages\pub.py
C:\tmpsv59hb03\modules\packages\ps1.py.basta
C:\tmpsv59hb03\modules\packages\pub2016.py
C:\tmpsv59hb03\modules\packages\pub.py.basta
C:\tmpsv59hb03\modules\packages\python.py
C:\tmpsv59hb03\modules\packages\pub2016.py.basta
C:\tmpsv59hb03\modules\packages\rar.py
C:\tmpsv59hb03\modules\packages\python.py.basta
C:\tmpsv59hb03\modules\packages\reg.py
C:\tmpsv59hb03\modules\packages\rar.py.basta
C:\tmpsv59hb03\modules\packages\regsvr.py
C:\tmpsv59hb03\modules\packages\reg.py.basta
C:\tmpsv59hb03\modules\packages\sct.py
C:\tmpsv59hb03\modules\packages\regsvr.py.basta
C:\tmpsv59hb03\modules\packages\service.py
C:\tmpsv59hb03\modules\packages\sct.py.basta
C:\tmpsv59hb03\modules\packages\service_dll.py
C:\tmph_w19omx\modules\packages\eml.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode-Unpacker.py
C:\tmph_w19omx\modules\packages\msix.py.basta
C:\tmpsv59hb03\modules\packages\service.py.basta
C:\tmpsv59hb03\modules\packages\service_dll.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode.py
C:\tmpsv59hb03\modules\packages\Shellcode_x64.py
C:\tmpsv59hb03\modules\packages\Shellcode.py.basta
C:\tmpsv59hb03\modules\packages\swf.py
C:\tmpsv59hb03\modules\packages\Unpacker.py
C:\tmpsv59hb03\modules\packages\Shellcode_x64.py.basta
C:\tmpsv59hb03\modules\packages\swf.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_js.py
C:\tmpsv59hb03\modules\packages\Unpacker_dll.py
C:\tmpsv59hb03\modules\packages\Unpacker_dll.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_regsvr.py
C:\tmpsv59hb03\modules\packages\Unpacker_ps1.py
C:\tmpsv59hb03\modules\packages\Unpacker_ps1.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_js.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_zip.py
C:\tmpsv59hb03\modules\packages\vawtrak.py
C:\tmpsv59hb03\modules\packages\vbejse.py
C:\tmpsv59hb03\modules\packages\vawtrak.py.basta
C:\tmpsv59hb03\modules\packages\vbs.py
C:\tmpsv59hb03\modules\packages\Unpacker_zip.py.basta
C:\tmpsv59hb03\modules\packages\wsf.py
C:\tmpsv59hb03\modules\packages\xls.py
C:\tmpsv59hb03\modules\packages\wsf.py.basta
C:\tmpsv59hb03\modules\packages\xls2016.py
C:\tmpsv59hb03\modules\packages\xps.py
C:\tmpsv59hb03\modules\packages\xls.py.basta
C:\tmpsv59hb03\modules\packages\xslt.py
C:\tmpsv59hb03\modules\packages\zip.py
C:\tmpsv59hb03\modules\packages\zip_compound.py
C:\tmpsv59hb03\modules\packages\xslt.py.basta
C:\tmpsv59hb03\modules\packages\__init__.py
C:\tmpugscyilj\lib\api\*
C:\tmpsv59hb03\modules\packages\__init__.py.basta
C:\tmpsv59hb03\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpsv59hb03\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpugscyilj\data\yara\AgentTesla.yar
C:\tmpugscyilj\data\yara\AgentTesla.yar.basta
C:\tmpugscyilj\data\yara\Al-khaser.yar
C:\tmpsv59hb03\modules\packages\zip_compound.py.basta
C:\tmpugscyilj\data\yara\Blister.yar
C:\tmpsv59hb03\modules\packages\zip.py.basta
C:\tmpugscyilj\data\yara\AntiCuckoo.yar
C:\tmpugscyilj\data\yara\AntiCuckoo.yar.basta
C:\tmpugscyilj\data\yara\BumbleBee.yar
C:\tmpugscyilj\data\yara\Blister.yar.basta
C:\tmpugscyilj\lib\common\__pycache__\readme.txt
C:\tmpugscyilj\data\yara\BumbleBee.yar.basta
C:\tmpugscyilj\data\yara\BuerLoader.yar
C:\tmpugscyilj\data\yara\BuerLoader.yar.basta
C:\tmpugscyilj\data\yara\CargoBayLoader.yar
C:\tmpugscyilj\data\yara\capemon.yac
C:\tmpugscyilj\data\yara\DarkGate.yar
C:\tmpugscyilj\data\yara\CargoBayLoader.yar.basta
C:\tmpugscyilj\data\yara\DarkGateLoader.yar
C:\tmpugscyilj\data\yara\DarkGate.yar.basta
C:\tmpugscyilj\data\yara\DoomedLoader.yar
C:\tmpugscyilj\data\yara\DarkGateLoader.yar.basta
C:\tmpugscyilj\data\yara\DridexLoader.yar
C:\tmph_w19omx\modules\packages\xps.py.basta
C:\tmpugscyilj\data\yara\EmotetPacker.yar
C:\tmpsv59hb03\lib\common\parse_pe.py.basta
C:\tmpugscyilj\data\yara\DoomedLoader.yar.basta
C:\tmpugscyilj\data\yara\capemon.yac.basta
C:\tmpugscyilj\data\yara\Formbook.yar
C:\tmpugscyilj\data\yara\GetTickCountAntiVM.yar
C:\tmpugscyilj\data\yara\Guloader.yar
C:\tmpugscyilj\data\yara\Formbook.yar.basta
C:\tmpugscyilj\data\yara\HeavensSyscall.yar
C:\tmpugscyilj\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpugscyilj\data\yara\IcedID.yar
C:\tmpugscyilj\data\yara\Guloader.yar.basta
C:\tmpugscyilj\data\yara\Latrodectus.yar
C:\tmpugscyilj\data\yara\Lumma.yar
C:\tmpugscyilj\data\yara\HeavensSyscall.yar.basta
C:\tmpugscyilj\data\yara\ModiLoader.yar
C:\tmpugscyilj\data\yara\IcedID.yar.basta
C:\tmpugscyilj\data\yara\Lumma.yar.basta
C:\tmpugscyilj\data\yara\MysterySnail.yar
C:\tmpugscyilj\data\yara\MysterySnail.yar.basta
C:\tmpugscyilj\data\yara\NSIS.yar
C:\tmpugscyilj\data\yara\NSIS.yar.basta
C:\tmpugscyilj\data\yara\Pafish.yar
C:\tmpugscyilj\data\yara\Pafish.yar.basta
C:\tmpugscyilj\data\yara\Pikabot.yar
C:\tmpugscyilj\data\yara\Pikabot.yar.basta
C:\tmpugscyilj\data\yara\RdtscpAntiVM.yar
C:\tmpugscyilj\data\yara\RdtscpAntiVM.yar.basta
C:\tmpugscyilj\data\yara\Rhadamanthys.yar
C:\tmpugscyilj\data\yara\Rhadamanthys.yar.basta
C:\tmpugscyilj\data\yara\QakBot.yar
C:\tmpugscyilj\data\yara\QakBot.yar.basta
C:\tmpugscyilj\data\yara\RisePro.yar
C:\tmpugscyilj\data\yara\RisePro.yar.basta
C:\tmpugscyilj\data\yara\Stealc.yar
C:\tmpugscyilj\data\yara\Stealc.yar.basta
C:\tmpugscyilj\data\yara\Socks5Systemz.yar
C:\tmpugscyilj\data\yara\Socks5Systemz.yar.basta
C:\tmpugscyilj\data\yara\Syscall.yar
C:\tmpugscyilj\data\yara\Syscall.yar.basta
C:\tmpugscyilj\data\yara\SingleStepAntiHook.yar
C:\tmpugscyilj\data\yara\SingleStepAntiHook.yar.basta
C:\tmpugscyilj\data\yara\UrsnifV3.yar
C:\tmpugscyilj\data\yara\UrsnifV3.yar.basta
C:\tmpugscyilj\data\yara\VBCrypter.yar
C:\tmpugscyilj\data\yara\VBCrypter.yar.basta
C:\tmpugscyilj\data\yara\SmokeLoader.yar
C:\tmpugscyilj\data\yara\SmokeLoader.yar.basta
C:\tmpugscyilj\data\yara\Zloader.yar
C:\tmpugscyilj\data\yara\Zloader.yar.basta
C:\tmpugscyilj\data\yara\XWorm.yar
C:\tmpugscyilj\data\yara\XWorm.yar.basta
C:\tmpugscyilj\lib\api\screenshot.py
C:\tmpugscyilj\lib\api\screenshot.py.basta
C:\tmpugscyilj\lib\api\__init__.py
C:\tmpugscyilj\lib\api\__init__.py.basta
C:\tmpugscyilj\lib\api\utils.py
C:\tmpugscyilj\lib\api\utils.py.basta
C:\tmpugscyilj\lib\api\process.py
C:\tmpugscyilj\lib\api\process.py.basta
C:\tmpugscyilj\lib\common\constants.py
C:\tmpugscyilj\lib\common\constants.py.basta
C:\tmpugscyilj\lib\common\defines.py
C:\tmpugscyilj\lib\common\defines.py.basta
C:\tmpugscyilj\lib\common\exceptions.py
C:\tmpugscyilj\lib\common\exceptions.py.basta
C:\tmpugscyilj\lib\common\hashing.py
C:\tmpugscyilj\lib\common\hashing.py.basta
C:\tmpugscyilj\lib\common\parse_pe.py
C:\tmpugscyilj\lib\common\parse_pe.py.basta
C:\tmpugscyilj\lib\common\errors.py
C:\tmpugscyilj\lib\common\errors.py.basta
C:\tmpugscyilj\lib\common\rand.py
C:\tmpugscyilj\lib\common\rand.py.basta
C:\tmpugscyilj\lib\common\registry.py
C:\tmpugscyilj\lib\common\registry.py.basta
C:\tmpugscyilj\lib\common\results.py
C:\tmpugscyilj\lib\common\results.py.basta
C:\tmpugscyilj\lib\core\compound.py
C:\tmpugscyilj\lib\core\compound.py.basta
C:\tmpugscyilj\lib\common\__init__.py
C:\tmpugscyilj\lib\common\__init__.py.basta
C:\tmpugscyilj\lib\common\zip_utils.py
C:\tmpugscyilj\lib\common\zip_utils.py.basta
C:\tmpugscyilj\lib\core\config.py
C:\tmpugscyilj\lib\core\config.py.basta
C:\tmpugscyilj\lib\core\log.py
C:\tmpugscyilj\lib\core\log.py.basta
C:\tmpugscyilj\lib\core\privileges.py
C:\tmpugscyilj\lib\core\privileges.py.basta
C:\tmpugscyilj\lib\core\pipe.py
C:\tmpugscyilj\lib\core\pipe.py.basta
C:\tmpugscyilj\lib\core\packages.py
C:\tmpugscyilj\lib\core\packages.py.basta
C:\tmpugscyilj\lib\core\__init__.py
C:\tmpugscyilj\lib\core\__init__.py.basta
C:\tmpugscyilj\lib\core\startup.py
C:\tmpugscyilj\lib\core\startup.py.basta
C:\tmpugscyilj\modules\auxiliary\amsi_collector.py
C:\tmpugscyilj\modules\auxiliary\amsi_collector.py.basta
C:\tmpugscyilj\modules\auxiliary\autoruns.py
C:\tmpugscyilj\modules\auxiliary\autoruns.py.basta
C:\tmpugscyilj\modules\auxiliary\browser.py
C:\tmpugscyilj\modules\auxiliary\browser.py.basta
C:\tmpugscyilj\modules\auxiliary\curtain.py
C:\tmpugscyilj\modules\auxiliary\curtain.py.basta
C:\tmpugscyilj\modules\auxiliary\digisig.py
C:\tmpugscyilj\modules\auxiliary\digisig.py.basta
C:\tmpugscyilj\modules\auxiliary\during_script.py
C:\tmpugscyilj\modules\auxiliary\during_script.py.basta
C:\tmpugscyilj\modules\auxiliary\disguise.py
C:\tmpugscyilj\modules\auxiliary\disguise.py.basta
C:\tmpugscyilj\modules\auxiliary\amsi.py
C:\tmpugscyilj\modules\auxiliary\amsi.py.basta
C:\tmpugscyilj\modules\auxiliary\evtx.py
C:\tmpugscyilj\modules\auxiliary\evtx.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpugscyilj\data\yara\EmotetPacker.yar.basta
C:\tmpugscyilj\modules\auxiliary\pre_script.py
C:\tmpugscyilj\modules\auxiliary\human.py
C:\tmpugscyilj\modules\auxiliary\human.py.basta
C:\tmpugscyilj\modules\auxiliary\permissions.py
C:\tmpugscyilj\modules\auxiliary\permissions.py.basta
C:\tmpugscyilj\modules\auxiliary\procmon.py
C:\tmpugscyilj\modules\auxiliary\recentfiles.py
C:\tmpugscyilj\modules\auxiliary\recentfiles.py.basta
C:\tmpugscyilj\modules\auxiliary\screenshots.py
C:\tmpugscyilj\modules\auxiliary\sysmon.py
C:\tmpugscyilj\modules\auxiliary\screenshots.py.basta
C:\tmpugscyilj\modules\auxiliary\tlsdump.py
C:\tmpugscyilj\modules\auxiliary\sysmon.py.basta
C:\tmpugscyilj\modules\auxiliary\tlsdump.py.basta
C:\tmpugscyilj\modules\auxiliary\usage.py
C:\tmpugscyilj\modules\auxiliary\procmon.py.basta
C:\tmpugscyilj\modules\auxiliary\__init__.py
C:\tmpugscyilj\modules\packages\access.py
C:\tmpugscyilj\modules\packages\applet.py
C:\tmpugscyilj\modules\packages\archive.py
C:\tmpugscyilj\modules\packages\access.py.basta
C:\tmpugscyilj\modules\auxiliary\__init__.py.basta
C:\tmpugscyilj\modules\auxiliary\usage.py.basta
C:\tmpugscyilj\modules\packages\applet.py.basta
C:\tmpugscyilj\modules\packages\one.py
C:\tmpugscyilj\modules\packages\pdf.py
C:\tmpugscyilj\modules\packages\ppt.py
C:\tmpugscyilj\modules\packages\ppt2016.py
C:\tmpugscyilj\modules\packages\pdf.py.basta
C:\tmpugscyilj\modules\packages\one.py.basta
C:\tmpugscyilj\modules\packages\ps1.py
C:\tmpugscyilj\modules\packages\ppt.py.basta
C:\tmpugscyilj\modules\packages\pub.py
C:\tmpugscyilj\modules\packages\pub2016.py
C:\tmpugscyilj\modules\packages\ps1.py.basta
C:\tmpugscyilj\modules\packages\rar.py
C:\tmpugscyilj\modules\packages\reg.py
C:\tmpugscyilj\modules\packages\regsvr.py
C:\tmpugscyilj\modules\packages\sct.py
C:\tmpugscyilj\modules\packages\rar.py.basta
C:\tmpugscyilj\modules\packages\service.py
C:\tmpugscyilj\modules\packages\reg.py.basta
C:\tmpugscyilj\modules\packages\autoit.py
C:\tmpugscyilj\modules\packages\autoit.py.basta
C:\tmpugscyilj\modules\packages\service.py.basta
C:\tmpugscyilj\modules\packages\service_dll.py
C:\tmpugscyilj\modules\packages\Shellcode-Unpacker.py
C:\tmpugscyilj\modules\packages\service_dll.py.basta
C:\tmpugscyilj\modules\packages\Shellcode.py
C:\tmpugscyilj\modules\packages\Shellcode_x64.py
C:\tmpugscyilj\modules\packages\Shellcode.py.basta
C:\tmpugscyilj\modules\packages\swf.py
C:\tmpugscyilj\modules\packages\swf.py.basta
C:\tmpugscyilj\modules\packages\Unpacker.py
C:\tmpugscyilj\modules\packages\Unpacker_dll.py
C:\tmpugscyilj\modules\packages\Unpacker_dll.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_js.py
C:\tmpugscyilj\modules\packages\Unpacker_js.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_ps1.py
C:\tmpugscyilj\modules\packages\Unpacker_ps1.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_regsvr.py
C:\tmpugscyilj\modules\packages\Unpacker_regsvr.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_zip.py
C:\tmpugscyilj\modules\packages\vawtrak.py
C:\tmpugscyilj\modules\packages\Unpacker_zip.py.basta
C:\tmpugscyilj\modules\packages\vbejse.py
C:\tmpugscyilj\modules\packages\vbejse.py.basta
C:\tmpugscyilj\modules\packages\vbs.py
C:\tmpugscyilj\modules\packages\vbs.py.basta
C:\tmpugscyilj\modules\packages\wsf.py
C:\tmpugscyilj\modules\packages\wsf.py.basta
C:\tmpugscyilj\modules\packages\xls2016.py
C:\tmpugscyilj\modules\packages\Unpacker.py.basta
C:\tmpugscyilj\modules\packages\xps.py
C:\tmpugscyilj\modules\packages\xls2016.py.basta
C:\tmpugscyilj\modules\packages\xslt.py
C:\tmpugscyilj\modules\packages\xls.py
C:\tmpugscyilj\modules\packages\xls.py.basta
C:\tmpugscyilj\modules\packages\zip.py
C:\tmpugscyilj\modules\packages\xslt.py.basta
C:\tmpugscyilj\modules\packages\zip_compound.py
C:\tmpugscyilj\modules\packages\zip_compound.py.basta
C:\tmpugscyilj\modules\packages\__init__.py
C:\tmpugscyilj\modules\packages\__init__.py.basta
C:\tmpugscyilj\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpxa6n6jlb\data\yara\AgentTesla.yar
C:\tmpugscyilj\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpxa6n6jlb\data\yara\Al-khaser.yar
C:\tmpxa6n6jlb\data\yara\Al-khaser.yar.basta
C:\tmpxa6n6jlb\data\yara\AntiCuckoo.yar
C:\tmpxa6n6jlb\data\yara\Blister.yar
C:\tmpxa6n6jlb\data\yara\Blister.yar.basta
C:\tmpxa6n6jlb\data\yara\BuerLoader.yar
C:\tmpxa6n6jlb\data\yara\BuerLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\AgentTesla.yar.basta
C:\tmpxa6n6jlb\data\yara\capemon.yac
C:\tmpxa6n6jlb\data\yara\AntiCuckoo.yar.basta
C:\tmpxa6n6jlb\data\yara\CargoBayLoader.yar
C:\tmpxa6n6jlb\data\yara\BumbleBee.yar
C:\tmpxa6n6jlb\data\yara\BumbleBee.yar.basta
C:\tmpxa6n6jlb\data\yara\DarkGate.yar
C:\tmpxa6n6jlb\data\yara\CargoBayLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\DarkGateLoader.yar
C:\tmpxa6n6jlb\data\yara\DarkGate.yar.basta
C:\tmpxa6n6jlb\data\yara\DoomedLoader.yar
C:\tmpxa6n6jlb\data\yara\DarkGateLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\DridexLoader.yar
C:\tmpxa6n6jlb\data\yara\DoomedLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\EmotetPacker.yar
C:\tmpxa6n6jlb\data\yara\DridexLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\EmotetPacker.yar.basta
C:\tmpxa6n6jlb\data\yara\Formbook.yar
C:\tmpxa6n6jlb\data\yara\GetTickCountAntiVM.yar
C:\tmpxa6n6jlb\data\yara\Formbook.yar.basta
C:\tmpxa6n6jlb\data\yara\Guloader.yar
C:\tmpxa6n6jlb\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpxa6n6jlb\data\yara\HeavensSyscall.yar
C:\tmpxa6n6jlb\data\yara\Guloader.yar.basta
C:\tmpxa6n6jlb\data\yara\IcedID.yar
C:\tmpxa6n6jlb\data\yara\HeavensSyscall.yar.basta
C:\tmpxa6n6jlb\data\yara\Latrodectus.yar
C:\tmpxa6n6jlb\data\yara\IcedID.yar.basta
C:\tmpxa6n6jlb\data\yara\Lumma.yar
C:\tmpxa6n6jlb\data\yara\Latrodectus.yar.basta
C:\tmpxa6n6jlb\data\yara\ModiLoader.yar
C:\tmpugscyilj\modules\packages\vawtrak.py.basta
C:\tmpxa6n6jlb\data\yara\MysterySnail.yar
C:\tmpxa6n6jlb\data\yara\Lumma.yar.basta
C:\tmpxa6n6jlb\data\yara\NSIS.yar
C:\tmpugscyilj\modules\packages\zip.py.basta
C:\tmpugscyilj\modules\packages\xps.py.basta
C:\tmpxa6n6jlb\data\yara\Pafish.yar
C:\tmpxa6n6jlb\data\yara\RdtscpAntiVM.yar
C:\tmpxa6n6jlb\data\yara\Rhadamanthys.yar
C:\tmpxa6n6jlb\data\yara\RisePro.yar
C:\tmpxa6n6jlb\data\yara\QakBot.yar
C:\tmpxa6n6jlb\data\yara\QakBot.yar.basta
C:\tmpxa6n6jlb\data\yara\SmokeLoader.yar
C:\tmpxa6n6jlb\data\yara\Rhadamanthys.yar.basta
C:\tmpxa6n6jlb\data\yara\Socks5Systemz.yar
C:\tmpxa6n6jlb\data\yara\Syscall.yar
C:\tmpxa6n6jlb\data\yara\Stealc.yar
C:\tmpxa6n6jlb\data\yara\VBCrypter.yar
C:\tmpxa6n6jlb\data\yara\VBCrypter.yar.basta
C:\tmpxa6n6jlb\data\yara\XWorm.yar
C:\tmpxa6n6jlb\data\yara\RisePro.yar.basta
C:\tmpxa6n6jlb\data\yara\XWorm.yar.basta
C:\tmpxa6n6jlb\data\yara\UrsnifV3.yar
C:\tmpxa6n6jlb\data\yara\UrsnifV3.yar.basta
C:\tmpxa6n6jlb\lib\api\*
C:\tmpxa6n6jlb\lib\api\process.py
C:\tmpxa6n6jlb\lib\api\process.py.basta
C:\tmpxa6n6jlb\lib\api\screenshot.py
C:\tmpxa6n6jlb\lib\api\screenshot.py.basta
C:\tmpxa6n6jlb\lib\api\utils.py
C:\tmpxa6n6jlb\lib\api\utils.py.basta
C:\tmpxa6n6jlb\lib\api\__pycache__\readme.txt
C:\tmpxa6n6jlb\lib\api\__init__.py
C:\tmpxa6n6jlb\lib\api\__init__.py.basta
C:\tmpxa6n6jlb\lib\common\*
C:\tmpxa6n6jlb\lib\common\abstracts.py
C:\tmpxa6n6jlb\lib\common\common.py
C:\tmpxa6n6jlb\lib\common\constants.py
C:\tmpxa6n6jlb\lib\common\common.py.basta
C:\tmpxa6n6jlb\lib\common\defines.py
C:\tmpxa6n6jlb\lib\common\errors.py
C:\tmpxa6n6jlb\lib\common\constants.py.basta
C:\tmpxa6n6jlb\lib\common\exceptions.py
C:\tmpxa6n6jlb\lib\common\hashing.py
C:\tmpxa6n6jlb\lib\common\abstracts.py.basta
C:\tmpxa6n6jlb\lib\common\parse_pe.py
C:\tmpxa6n6jlb\lib\common\defines.py.basta
C:\tmpxa6n6jlb\lib\common\rand.py
C:\tmpxa6n6jlb\lib\common\exceptions.py.basta
C:\tmpxa6n6jlb\lib\common\parse_pe.py.basta
C:\tmpxa6n6jlb\lib\common\rand.py.basta
C:\tmpxa6n6jlb\lib\common\errors.py.basta
C:\Archivos de programa\RUXIM\Assets\MainGraphic.gif.basta
C:\tmpxa6n6jlb\lib\common\registry.py
C:\tmpxa6n6jlb\lib\common\registry.py.basta
C:\tmpxa6n6jlb\lib\common\__pycache__\readme.txt
C:\tmpxa6n6jlb\lib\common\results.py
C:\tmpxa6n6jlb\lib\core\*
C:\tmpxa6n6jlb\lib\common\zip_utils.py
C:\tmpxa6n6jlb\lib\common\zip_utils.py.basta
C:\tmpxa6n6jlb\lib\common\__init__.py
C:\tmpxa6n6jlb\lib\common\__init__.py.basta
C:\tmpxa6n6jlb\lib\core\compound.py
C:\tmpxa6n6jlb\lib\core\compound.py.basta
C:\tmpxa6n6jlb\lib\core\__pycache__\readme.txt
C:\tmpxa6n6jlb\lib\__pycache__\*
C:\tmpxa6n6jlb\modules\auxiliary\*
C:\tmpxa6n6jlb\lib\core\config.py
C:\tmpxa6n6jlb\lib\core\config.py.basta
C:\tmpxa6n6jlb\lib\core\log.py
C:\tmpxa6n6jlb\lib\core\log.py.basta
C:\tmpxa6n6jlb\lib\core\packages.py
C:\tmpxa6n6jlb\lib\core\packages.py.basta
C:\tmpxa6n6jlb\lib\core\pipe.py
C:\tmpxa6n6jlb\lib\core\privileges.py
C:\tmpxa6n6jlb\lib\core\startup.py
C:\tmpxa6n6jlb\lib\core\pipe.py.basta
C:\tmpxa6n6jlb\lib\core\__init__.py
C:\tmpxa6n6jlb\lib\core\privileges.py.basta
C:\tmpxa6n6jlb\lib\core\__init__.py.basta
C:\tmpxa6n6jlb\lib\core\startup.py.basta
C:\tmpxa6n6jlb\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpxa6n6jlb\modules\auxiliary\amsi.py
C:\tmpxa6n6jlb\modules\auxiliary\amsi_collector.py
C:\tmpxa6n6jlb\modules\auxiliary\amsi_collector.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\__pycache__\readme.txt
C:\tmpxa6n6jlb\modules\auxiliary\autoruns.py
C:\tmpxa6n6jlb\modules\packages\*
C:\tmpxa6n6jlb\modules\auxiliary\browser.py
C:\tmpxa6n6jlb\modules\auxiliary\curtain.py
C:\tmpxa6n6jlb\modules\auxiliary\digisig.py
C:\tmpxa6n6jlb\modules\auxiliary\disguise.py
C:\tmpxa6n6jlb\modules\auxiliary\browser.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\during_script.py
C:\tmpxa6n6jlb\modules\auxiliary\curtain.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\evtx.py
C:\tmpxa6n6jlb\modules\auxiliary\autoruns.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\filepickup.py
C:\tmpxa6n6jlb\modules\auxiliary\during_script.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\html_scraper.py
C:\tmpxa6n6jlb\modules\auxiliary\filepickup.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\human.py
C:\tmpxa6n6jlb\modules\auxiliary\digisig.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\permissions.py
C:\tmpxa6n6jlb\modules\auxiliary\html_scraper.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\pre_script.py
C:\tmpxa6n6jlb\modules\auxiliary\permissions.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\procmon.py
C:\tmpxa6n6jlb\modules\auxiliary\tlsdump.py
C:\tmpxa6n6jlb\modules\auxiliary\recentfiles.py
C:\tmpxa6n6jlb\modules\auxiliary\recentfiles.py.basta
C:\tmpxa6n6jlb\modules\packages\access.py
C:\tmpxa6n6jlb\modules\packages\access.py.basta
C:\tmpxa6n6jlb\modules\packages\applet.py
C:\tmpxa6n6jlb\modules\auxiliary\screenshots.py
C:\tmpxa6n6jlb\modules\auxiliary\screenshots.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\__init__.py
C:\tmpxa6n6jlb\modules\auxiliary\__init__.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\procmon.py.basta
C:\tmpxa6n6jlb\modules\packages\chm.py
C:\tmpxa6n6jlb\modules\packages\chrome.py
C:\tmpxa6n6jlb\modules\packages\autoit.py
C:\tmpxa6n6jlb\modules\packages\autoit.py.basta
C:\tmpxa6n6jlb\modules\packages\chromium.py
C:\tmpxa6n6jlb\modules\packages\archive.py
C:\tmpxa6n6jlb\modules\packages\archive.py.basta
C:\tmpxa6n6jlb\modules\packages\cpl.py
C:\tmpxa6n6jlb\modules\packages\dll.py
C:\tmpxa6n6jlb\modules\packages\doc.py
C:\tmpxa6n6jlb\modules\packages\doc_antivm.py
C:\tmpxa6n6jlb\modules\packages\cpl.py.basta
C:\tmpxa6n6jlb\modules\packages\edge.py
C:\tmpxa6n6jlb\modules\packages\eml.py
C:\tmpxa6n6jlb\modules\packages\dll.py.basta
C:\tmpxa6n6jlb\modules\packages\exe.py
C:\tmpxa6n6jlb\modules\packages\doc2016.py
C:\tmpxa6n6jlb\modules\packages\doc2016.py.basta
C:\tmpxa6n6jlb\modules\packages\firefox.py
C:\tmpxa6n6jlb\modules\packages\generic.py
C:\tmpxa6n6jlb\modules\packages\edge.py.basta
C:\tmpxa6n6jlb\modules\packages\ichitaro.py
C:\tmpxa6n6jlb\modules\packages\ie.py
C:\tmpxa6n6jlb\modules\packages\hwp.py
C:\tmpxa6n6jlb\modules\packages\hwp.py.basta
C:\tmpxa6n6jlb\modules\packages\generic.py.basta
C:\tmpxa6n6jlb\modules\packages\jar.py
C:\tmpxa6n6jlb\modules\packages\js.py
C:\tmpxa6n6jlb\modules\packages\js_antivm.py
C:\tmpxa6n6jlb\modules\packages\js.py.basta
C:\tmpxa6n6jlb\modules\packages\lnk.py
C:\tmpxa6n6jlb\modules\packages\mht.py
C:\tmpxa6n6jlb\modules\packages\msbuild.py
C:\tmpxa6n6jlb\modules\packages\lnk.py.basta
C:\tmpxa6n6jlb\modules\packages\msg.py
C:\tmpxa6n6jlb\modules\packages\msbuild.py.basta
C:\tmpxa6n6jlb\modules\packages\msi.py
C:\tmpxa6n6jlb\modules\packages\msix.py
C:\tmpxa6n6jlb\modules\packages\msix.py.basta
C:\tmpxa6n6jlb\modules\packages\nsis.py
C:\tmpxa6n6jlb\modules\packages\ollydbg.py
C:\tmpxa6n6jlb\modules\packages\one.py
C:\tmpxa6n6jlb\modules\packages\nsis.py.basta
C:\tmpxa6n6jlb\modules\packages\msg.py.basta
C:\tmpxa6n6jlb\modules\packages\ppt.py
C:\tmpxa6n6jlb\modules\packages\pdf.py
C:\tmpxa6n6jlb\modules\packages\pdf.py.basta
C:\tmpxa6n6jlb\modules\packages\ppt2016.py
C:\tmpxa6n6jlb\modules\packages\__pycache__\readme.txt
C:\tmpxa6n6jlb\modules\packages\ollydbg.py.basta
C:\tmpxa6n6jlb\modules\packages\ps1.py
C:\tmpxa6n6jlb\modules\packages\msi.py.basta
C:\tmpxa6n6jlb\modules\packages\pub.py
C:\tmpxa6n6jlb\modules\packages\pub2016.py
C:\tmpxa6n6jlb\modules\packages\ps1.py.basta
C:\tmpxa6n6jlb\modules\packages\python.py
C:\tmpxa6n6jlb\modules\packages\pub2016.py.basta
C:\tmpxa6n6jlb\modules\packages\rar.py
C:\tmpxa6n6jlb\modules\packages\rar.py.basta
C:\tmpxa6n6jlb\modules\packages\reg.py
C:\tmpxa6n6jlb\modules\packages\reg.py.basta
C:\tmpxa6n6jlb\modules\packages\regsvr.py
C:\tmpxa6n6jlb\modules\packages\regsvr.py.basta
C:\tmpxa6n6jlb\modules\packages\sct.py
C:\tmpxa6n6jlb\modules\packages\sct.py.basta
C:\tmpxa6n6jlb\modules\packages\service.py
C:\tmpxa6n6jlb\modules\packages\service.py.basta
C:\tmpxa6n6jlb\modules\packages\service_dll.py
C:\tmpxa6n6jlb\tests\lib\*
C:\tmpxa6n6jlb\tests\lib\api\readme.txt
C:\tmpxa6n6jlb\modules\packages\service_dll.py.basta
C:\tmpxa6n6jlb\modules\packages\python.py.basta
C:\tmpxa6n6jlb\modules\packages\Shellcode-Unpacker.py
C:\tmpxa6n6jlb\modules\packages\one.py.basta
C:\tmpxa6n6jlb\modules\packages\Shellcode.py
C:\tmpxa6n6jlb\modules\packages\Shellcode_x64.py
C:\tmpxa6n6jlb\modules\packages\swf.py
C:\tmpxa6n6jlb\modules\packages\Unpacker.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_dll.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_ps1.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_dll.py.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_regsvr.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_zip.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_js.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_js.py.basta
C:\tmpxa6n6jlb\modules\packages\vawtrak.py
C:\tmpxa6n6jlb\modules\packages\vbejse.py
C:\tmpxa6n6jlb\modules\packages\swf.py.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_regsvr.py.basta
C:\tmpxa6n6jlb\modules\packages\vbs.py
C:\tmpxa6n6jlb\modules\packages\xslt.py
C:\tmpxa6n6jlb\modules\packages\zip.py
C:\tmpxa6n6jlb\modules\packages\zip_compound.py
C:\tmpxa6n6jlb\modules\packages\vbs.py.basta
C:\tmpxa6n6jlb\modules\packages\__init__.py
C:\tmpxa6n6jlb\modules\packages\zip_compound.py.basta
C:\tmpxa6n6jlb\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\data\yara\AgentTesla.yar
C:\tmpxa6n6jlb\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\data\yara\Al-khaser.yar
C:\tmpyhyv52bd\data\yara\AgentTesla.yar.basta
C:\tmpyhyv52bd\data\yara\AntiCuckoo.yar
C:\tmpyhyv52bd\data\yara\Al-khaser.yar.basta
C:\tmpyhyv52bd\data\yara\Blister.yar
C:\tmpyhyv52bd\lib\api\*
C:\tmpyhyv52bd\data\yara\AntiCuckoo.yar.basta
C:\tmpyhyv52bd\data\yara\Blister.yar.basta
C:\tmpyhyv52bd\lib\api\__pycache__\readme.txt
C:\tmpyhyv52bd\lib\common\*
C:\tmpxa6n6jlb\modules\packages\__init__.py.basta
C:\tmpyhyv52bd\data\yara\BuerLoader.yar
C:\tmpyhyv52bd\data\yara\BumbleBee.yar
C:\tmpyhyv52bd\data\yara\BuerLoader.yar.basta
C:\tmpyhyv52bd\data\yara\capemon.yac
C:\tmpxa6n6jlb\modules\packages\zip.py.basta
C:\tmpyhyv52bd\data\yara\CargoBayLoader.yar
C:\tmpyhyv52bd\data\yara\DarkGate.yar
C:\tmpyhyv52bd\data\yara\BumbleBee.yar.basta
C:\tmpyhyv52bd\data\yara\DarkGateLoader.yar
C:\tmpyhyv52bd\data\yara\CargoBayLoader.yar.basta
C:\tmpyhyv52bd\data\yara\DoomedLoader.yar
C:\tmpyhyv52bd\data\yara\DarkGate.yar.basta
C:\tmpyhyv52bd\data\yara\DridexLoader.yar
C:\tmpyhyv52bd\data\yara\DarkGateLoader.yar.basta
C:\tmpyhyv52bd\data\yara\EmotetPacker.yar
C:\tmpyhyv52bd\data\yara\DoomedLoader.yar.basta
C:\tmpyhyv52bd\data\yara\Formbook.yar
C:\tmpyhyv52bd\data\yara\DridexLoader.yar.basta
C:\tmpyhyv52bd\data\yara\GetTickCountAntiVM.yar
C:\tmpyhyv52bd\data\yara\EmotetPacker.yar.basta
C:\tmpyhyv52bd\data\yara\Guloader.yar
C:\tmpyhyv52bd\lib\core\__pycache__\readme.txt
C:\tmpyhyv52bd\data\yara\IcedID.yar
C:\tmpyhyv52bd\data\yara\HeavensSyscall.yar
C:\tmpyhyv52bd\data\yara\HeavensSyscall.yar.basta
C:\tmpyhyv52bd\data\yara\Latrodectus.yar
C:\tmpxa6n6jlb\modules\packages\Unpacker_ps1.py.basta
C:\tmpxa6n6jlb\modules\packages\xslt.py.basta
C:\tmpyhyv52bd\data\yara\Lumma.yar
C:\tmpyhyv52bd\data\yara\ModiLoader.yar
C:\tmpyhyv52bd\data\yara\MysterySnail.yar
C:\tmpyhyv52bd\data\yara\ModiLoader.yar.basta
C:\tmpyhyv52bd\data\yara\NSIS.yar
C:\tmpyhyv52bd\data\yara\Pafish.yar
C:\tmpyhyv52bd\data\yara\Pikabot.yar
C:\tmpyhyv52bd\data\yara\QakBot.yar
C:\tmpyhyv52bd\data\yara\MysterySnail.yar.basta
C:\tmpyhyv52bd\data\yara\RdtscpAntiVM.yar
C:\tmpyhyv52bd\data\yara\Pafish.yar.basta
C:\tmpyhyv52bd\data\yara\NSIS.yar.basta
C:\tmpyhyv52bd\data\yara\Rhadamanthys.yar
C:\tmpyhyv52bd\data\yara\RisePro.yar
C:\tmpyhyv52bd\data\yara\RdtscpAntiVM.yar.basta
C:\tmpyhyv52bd\data\yara\SingleStepAntiHook.yar
C:\tmpyhyv52bd\lib\__pycache__\*
C:\tmpyhyv52bd\data\yara\SmokeLoader.yar
C:\tmpyhyv52bd\modules\auxiliary\*
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\readme.txt
C:\tmpyhyv52bd\data\yara\Rhadamanthys.yar.basta
C:\tmpyhyv52bd\data\yara\Socks5Systemz.yar
C:\tmpyhyv52bd\data\yara\QakBot.yar.basta
C:\tmpyhyv52bd\data\yara\Syscall.yar
C:\tmpyhyv52bd\data\yara\UPX.yar
C:\tmpyhyv52bd\data\yara\UrsnifV3.yar
C:\tmpyhyv52bd\data\yara\VBCrypter.yar
C:\tmpyhyv52bd\data\yara\Zloader.yar
C:\tmpyhyv52bd\data\yara\UPX.yar.basta
C:\tmpyhyv52bd\lib\api\process.py
C:\tmpyhyv52bd\lib\api\screenshot.py
C:\tmpyhyv52bd\lib\api\utils.py
C:\tmpyhyv52bd\data\yara\UrsnifV3.yar.basta
C:\tmpyhyv52bd\lib\api\__init__.py
C:\tmpyhyv52bd\lib\common\abstracts.py
C:\tmpyhyv52bd\lib\common\common.py
C:\tmpyhyv52bd\lib\common\constants.py
C:\tmpyhyv52bd\lib\api\__init__.py.basta
C:\tmpyhyv52bd\lib\common\defines.py
C:\tmpyhyv52bd\lib\common\common.py.basta
C:\tmpyhyv52bd\lib\common\errors.py
C:\tmpyhyv52bd\lib\api\process.py.basta
C:\tmpyhyv52bd\lib\common\exceptions.py
C:\tmpyhyv52bd\lib\common\hashing.py
C:\tmpyhyv52bd\lib\common\exceptions.py.basta
C:\tmpyhyv52bd\lib\common\registry.py
C:\tmpyhyv52bd\lib\common\rand.py
C:\tmpyhyv52bd\lib\common\rand.py.basta
C:\tmpyhyv52bd\lib\common\results.py
C:\tmpyhyv52bd\lib\common\hashing.py.basta
C:\tmpyhyv52bd\lib\common\zip_utils.py
C:\tmpyhyv52bd\lib\common\results.py.basta
C:\tmpyhyv52bd\lib\common\__init__.py
C:\tmpyhyv52bd\lib\common\parse_pe.py
C:\tmpyhyv52bd\lib\common\parse_pe.py.basta
C:\tmpyhyv52bd\lib\core\compound.py
C:\tmpyhyv52bd\lib\common\__init__.py.basta
C:\tmpyhyv52bd\lib\core\config.py
C:\tmpyhyv52bd\lib\common\registry.py.basta
C:\tmpyhyv52bd\lib\core\log.py
C:\tmpyhyv52bd\modules\packages\*
C:\tmpyhyv52bd\lib\common\zip_utils.py.basta
C:\tmpyhyv52bd\modules\packages\__pycache__\readme.txt
C:\tmpyhyv52bd\lib\core\config.py.basta
C:\tmpyhyv52bd\lib\core\packages.py
C:\tmpyhyv52bd\lib\core\compound.py.basta
C:\tmpyhyv52bd\lib\core\pipe.py
C:\tmpyhyv52bd\lib\common\errors.py.basta
C:\tmpyhyv52bd\lib\core\privileges.py
C:\tmpyhyv52bd\lib\core\log.py.basta
C:\tmpyhyv52bd\lib\core\startup.py
C:\tmpyhyv52bd\lib\core\__init__.py
C:\tmpyhyv52bd\lib\core\privileges.py.basta
C:\tmpyhyv52bd\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\packages.py.basta
C:\tmpyhyv52bd\modules\auxiliary\amsi.py
C:\tmpyhyv52bd\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\amsi_collector.py
C:\tmpyhyv52bd\lib\core\__init__.py.basta
C:\tmpyhyv52bd\modules\auxiliary\autoruns.py
C:\tmpyhyv52bd\modules\auxiliary\amsi_collector.py.basta
C:\tmpyhyv52bd\modules\auxiliary\browser.py
C:\tmpyhyv52bd\modules\auxiliary\curtain.py
C:\tmpyhyv52bd\lib\core\startup.py.basta
C:\tmpyhyv52bd\modules\auxiliary\digisig.py
C:\tmpyhyv52bd\modules\auxiliary\browser.py.basta
C:\tmpyhyv52bd\modules\auxiliary\disguise.py
C:\tmpyhyv52bd\modules\auxiliary\autoruns.py.basta
C:\tmpyhyv52bd\modules\auxiliary\during_script.py
C:\tmpyhyv52bd\modules\auxiliary\curtain.py.basta
C:\tmpyhyv52bd\modules\auxiliary\evtx.py
C:\tmpyhyv52bd\modules\auxiliary\during_script.py.basta
C:\tmpyhyv52bd\modules\auxiliary\filepickup.py
C:\tmpyhyv52bd\modules\auxiliary\digisig.py.basta
C:\tmpyhyv52bd\modules\auxiliary\html_scraper.py
C:\tmpyhyv52bd\modules\auxiliary\filepickup.py.basta
C:\tmpyhyv52bd\modules\auxiliary\human.py
C:\tmpyhyv52bd\modules\auxiliary\disguise.py.basta
C:\tmpyhyv52bd\modules\auxiliary\permissions.py
C:\tmpyhyv52bd\modules\auxiliary\html_scraper.py.basta
C:\tmpyhyv52bd\modules\auxiliary\pre_script.py
C:\tmpyhyv52bd\modules\auxiliary\evtx.py.basta
C:\tmpyhyv52bd\modules\auxiliary\recentfiles.py
C:\tmpyhyv52bd\modules\auxiliary\procmon.py
C:\tmpyhyv52bd\modules\auxiliary\pre_script.py.basta
C:\tmpyhyv52bd\modules\auxiliary\tlsdump.py
C:\tmpyhyv52bd\modules\auxiliary\recentfiles.py.basta
C:\tmpyhyv52bd\modules\auxiliary\sysmon.py
C:\tmpyhyv52bd\modules\auxiliary\usage.py
C:\tmpyhyv52bd\modules\auxiliary\tlsdump.py.basta
C:\tmpyhyv52bd\modules\packages\autoit.py
C:\tmpyhyv52bd\modules\auxiliary\sysmon.py.basta
C:\tmpyhyv52bd\modules\packages\chm.py
C:\tmpyhyv52bd\modules\packages\autoit.py.basta
C:\tmpyhyv52bd\modules\packages\chrome.py
C:\tmpyhyv52bd\modules\auxiliary\usage.py.basta
C:\tmpyhyv52bd\modules\packages\chromium.py
C:\tmpyhyv52bd\modules\packages\chrome.py.basta
C:\tmpyhyv52bd\modules\packages\cpl.py
C:\tmpyhyv52bd\modules\packages\dll.py
C:\tmpyhyv52bd\modules\packages\doc.py
C:\tmpyhyv52bd\modules\packages\chm.py.basta
C:\tmpyhyv52bd\modules\packages\doc2016.py
C:\tmpyhyv52bd\modules\packages\doc_antivm.py
C:\tmpyhyv52bd\modules\packages\edge.py
C:\tmpyhyv52bd\modules\packages\doc_antivm.py.basta
C:\tmpyhyv52bd\modules\packages\eml.py
C:\tmpyhyv52bd\modules\packages\doc.py.basta
C:\tmpyhyv52bd\modules\packages\edge.py.basta
C:\tmpyhyv52bd\modules\packages\exe.py
C:\tmpyhyv52bd\modules\packages\firefox.py
C:\tmpyhyv52bd\modules\packages\dll.py.basta
C:\tmpyhyv52bd\modules\packages\firefox.py.basta
C:\tmpyhyv52bd\modules\packages\hta.py
C:\tmpyhyv52bd\modules\packages\doc2016.py.basta
C:\tmpyhyv52bd\modules\packages\hwp.py
C:\tmpyhyv52bd\modules\packages\eml.py.basta
C:\tmpyhyv52bd\modules\packages\ie.py
C:\tmpyhyv52bd\modules\packages\hta.py.basta
C:\tmpyhyv52bd\modules\packages\inf.py
C:\tmpyhyv52bd\modules\packages\hwp.py.basta
C:\tmpyhyv52bd\modules\packages\inp.py
C:\tmpyhyv52bd\modules\packages\ichitaro.py
C:\tmpyhyv52bd\modules\packages\ichitaro.py.basta
C:\tmpyhyv52bd\modules\packages\js.py
C:\tmpyhyv52bd\modules\packages\inp.py.basta
C:\tmpyhyv52bd\modules\packages\js_antivm.py
C:\tmpyhyv52bd\modules\packages\js_antivm.py.basta
C:\tmpyhyv52bd\modules\packages\lnk.py
C:\tmpyhyv52bd\modules\packages\lnk.py.basta
C:\tmpyhyv52bd\modules\packages\mht.py
C:\tmpyhyv52bd\modules\packages\mht.py.basta
C:\tmpyhyv52bd\modules\packages\msbuild.py
C:\tmpyhyv52bd\modules\packages\msbuild.py.basta
C:\tmpyhyv52bd\modules\packages\msg.py
C:\tmpyhyv52bd\modules\packages\msg.py.basta
C:\tmpyhyv52bd\modules\packages\msi.py
C:\tmpyhyv52bd\modules\packages\generic.py
C:\tmpyhyv52bd\modules\packages\generic.py.basta
C:\tmpyhyv52bd\modules\packages\inf.py.basta
C:\tmpyhyv52bd\modules\packages\msix.py
C:\tmpyhyv52bd\modules\packages\nsis.py
C:\tmpyhyv52bd\modules\packages\nsis.py.basta
C:\tmpyhyv52bd\modules\packages\ollydbg.py
C:\tmpyhyv52bd\modules\packages\jar.py
C:\tmpyhyv52bd\modules\packages\pdf.py
C:\tmpyhyv52bd\modules\packages\ppt.py
C:\tmpyhyv52bd\modules\packages\ppt2016.py
C:\tmpyhyv52bd\modules\packages\ps1.py
C:\tmpyhyv52bd\modules\packages\pub.py
C:\tmpyhyv52bd\modules\packages\ps1.py.basta
C:\tmpyhyv52bd\modules\packages\pub2016.py
C:\tmpyhyv52bd\modules\packages\python.py
C:\tmpyhyv52bd\modules\packages\rar.py
C:\tmpyhyv52bd\modules\packages\pub.py.basta
C:\tmpyhyv52bd\modules\packages\reg.py
C:\tmpyhyv52bd\modules\packages\pub2016.py.basta
C:\tmpyhyv52bd\modules\packages\sct.py
C:\tmpyhyv52bd\modules\packages\python.py.basta
C:\tmpyhyv52bd\modules\packages\service.py
C:\tmpyhyv52bd\modules\packages\rar.py.basta
C:\tmpyhyv52bd\modules\packages\service_dll.py
C:\tmpyhyv52bd\modules\packages\reg.py.basta
C:\tmpyhyv52bd\modules\packages\Shellcode-Unpacker.py
C:\tmpyhyv52bd\modules\packages\sct.py.basta
C:\tmpyhyv52bd\modules\packages\Shellcode.py
C:\tmpyhyv52bd\modules\packages\service.py.basta
C:\tmpyhyv52bd\modules\packages\regsvr.py
C:\tmpyhyv52bd\modules\packages\regsvr.py.basta
C:\tmpyhyv52bd\modules\packages\swf.py
C:\tmpyhyv52bd\modules\packages\Unpacker.py
C:\tmpyhyv52bd\modules\packages\Shellcode_x64.py
C:\tmpyhyv52bd\modules\packages\Shellcode_x64.py.basta
C:\tmpyhyv52bd\modules\packages\Unpacker_dll.py
C:\tmpyhyv52bd\modules\packages\Unpacker_js.py
C:\tmpyhyv52bd\data\yara\Lumma.yar.basta
C:\tmpyhyv52bd\modules\packages\Unpacker_regsvr.py
C:\tmpyhyv52bd\modules\packages\Unpacker_zip.py
C:\tmpyhyv52bd\modules\packages\vawtrak.py
C:\tmpyhyv52bd\modules\packages\vbejse.py
C:\tmpyhyv52bd\modules\packages\vbs.py
C:\tmpyhyv52bd\modules\packages\Unpacker_zip.py.basta
C:\tmpyhyv52bd\modules\packages\xls.py
C:\tmpyhyv52bd\modules\packages\vawtrak.py.basta
C:\tmpyhyv52bd\modules\packages\xls2016.py
C:\tmpyhyv52bd\modules\packages\wsf.py
C:\tmpyhyv52bd\modules\packages\wsf.py.basta
C:\tmpyhyv52bd\modules\packages\xps.py
C:\tmpyhyv52bd\modules\packages\xslt.py
C:\tmpyhyv52bd\modules\packages\zip.py
C:\tmpyhyv52bd\modules\packages\zip_compound.py
C:\tmpyhyv52bd\modules\packages\xslt.py.basta
C:\tmpyhyv52bd\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\modules\packages\__init__.py
C:\tmpyhyv52bd\modules\packages\__init__.py.basta
C:\tmp_4c73x2e\data\yara\Al-khaser.yar
C:\tmpyhyv52bd\modules\packages\zip_compound.py.basta
C:\tmpyhyv52bd\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\data\yara\AgentTesla.yar
C:\tmp_4c73x2e\data\yara\AgentTesla.yar.basta
C:\tmpyhyv52bd\modules\packages\zip.py.basta
C:\tmp_4c73x2e\data\yara\Al-khaser.yar.basta
C:\tmpyhyv52bd\modules\packages\Unpacker_dll.py.basta
C:\tmpyhyv52bd\data\yara\capemon.yac.basta
C:\tmp_4c73x2e\lib\api\__pycache__\readme.txt
C:\tmp_4c73x2e\data\yara\AntiCuckoo.yar
C:\tmp_4c73x2e\data\yara\AntiCuckoo.yar.basta
C:\tmp_4c73x2e\data\yara\Blister.yar
C:\tmp_4c73x2e\data\yara\BuerLoader.yar
C:\tmp_4c73x2e\data\yara\Blister.yar.basta
C:\tmp_4c73x2e\data\yara\BumbleBee.yar
C:\tmp_4c73x2e\data\yara\CargoBayLoader.yar
C:\tmp_4c73x2e\data\yara\BuerLoader.yar.basta
C:\tmp_4c73x2e\data\yara\DarkGate.yar
C:\tmp_4c73x2e\data\yara\DarkGateLoader.yar
C:\tmp_4c73x2e\data\yara\BumbleBee.yar.basta
C:\tmp_4c73x2e\data\yara\DoomedLoader.yar
C:\tmp_4c73x2e\data\yara\DridexLoader.yar
C:\tmp_4c73x2e\data\yara\CargoBayLoader.yar.basta
C:\tmp_4c73x2e\data\yara\EmotetPacker.yar
C:\tmp_4c73x2e\data\yara\Formbook.yar
C:\tmp_4c73x2e\data\yara\GetTickCountAntiVM.yar
C:\tmp_4c73x2e\data\yara\EmotetPacker.yar.basta
C:\tmp_4c73x2e\data\yara\Guloader.yar
C:\tmp_4c73x2e\data\yara\DridexLoader.yar.basta
C:\tmp_4c73x2e\data\yara\Latrodectus.yar
C:\tmp_4c73x2e\data\yara\IcedID.yar
C:\tmp_4c73x2e\data\yara\IcedID.yar.basta
C:\tmp_4c73x2e\data\yara\Lumma.yar
C:\tmp_4c73x2e\data\yara\DoomedLoader.yar.basta
C:\tmp_4c73x2e\data\yara\ModiLoader.yar
C:\tmp_4c73x2e\data\yara\Lumma.yar.basta
C:\tmp_4c73x2e\data\yara\MysterySnail.yar
C:\tmp_4c73x2e\data\yara\MysterySnail.yar.basta
C:\tmp_4c73x2e\data\yara\NSIS.yar
C:\tmp_4c73x2e\data\yara\NSIS.yar.basta
C:\tmp_4c73x2e\data\yara\Pafish.yar
C:\tmp_4c73x2e\data\yara\DarkGate.yar.basta
C:\tmp_4c73x2e\data\yara\Pikabot.yar
C:\tmp_4c73x2e\data\yara\Latrodectus.yar.basta
C:\tmp_4c73x2e\data\yara\QakBot.yar
C:\tmp_4c73x2e\data\yara\RdtscpAntiVM.yar
C:\tmp_4c73x2e\data\yara\RdtscpAntiVM.yar.basta
C:\tmp_4c73x2e\data\yara\Rhadamanthys.yar
C:\tmp_4c73x2e\data\yara\Rhadamanthys.yar.basta
C:\tmp_4c73x2e\data\yara\RisePro.yar
C:\tmp_4c73x2e\data\yara\Pafish.yar.basta
C:\tmp_4c73x2e\data\yara\SingleStepAntiHook.yar
C:\tmp_4c73x2e\data\yara\ModiLoader.yar.basta
C:\tmp_4c73x2e\data\yara\SmokeLoader.yar
C:\tmp_4c73x2e\data\yara\RisePro.yar.basta
C:\tmp_4c73x2e\data\yara\Socks5Systemz.yar
C:\tmp_4c73x2e\data\yara\QakBot.yar.basta
C:\tmp_4c73x2e\data\yara\Stealc.yar
C:\tmp_4c73x2e\data\yara\SingleStepAntiHook.yar.basta
C:\tmp_4c73x2e\data\yara\Syscall.yar
C:\tmp_4c73x2e\data\yara\UPX.yar
C:\tmp_4c73x2e\data\yara\SmokeLoader.yar.basta
C:\tmp_4c73x2e\data\yara\UrsnifV3.yar
C:\tmp_4c73x2e\data\yara\Socks5Systemz.yar.basta
C:\tmp_4c73x2e\data\yara\VBCrypter.yar
C:\tmp_4c73x2e\data\yara\Stealc.yar.basta
C:\tmp_4c73x2e\data\yara\XWorm.yar
C:\tmp_4c73x2e\data\yara\Syscall.yar.basta
C:\tmp_4c73x2e\data\yara\Zloader.yar
C:\tmp_4c73x2e\data\yara\UrsnifV3.yar.basta
C:\tmp_4c73x2e\lib\api\screenshot.py
C:\tmp_4c73x2e\data\yara\Zloader.yar.basta
C:\tmp_4c73x2e\lib\api\process.py
C:\tmp_4c73x2e\lib\api\process.py.basta
C:\tmp_4c73x2e\lib\common\*
C:\tmp_4c73x2e\data\yara\HeavensSyscall.yar
C:\tmp_4c73x2e\data\yara\HeavensSyscall.yar.basta
C:\tmp_4c73x2e\lib\common\abstracts.py
C:\tmp_4c73x2e\lib\common\common.py
C:\tmp_4c73x2e\lib\common\constants.py
C:\tmp_4c73x2e\lib\common\common.py.basta
C:\tmp_4c73x2e\lib\common\defines.py
C:\tmp_4c73x2e\lib\common\errors.py
C:\tmp_4c73x2e\lib\common\constants.py.basta
C:\tmp_4c73x2e\lib\common\exceptions.py
C:\tmp_4c73x2e\lib\common\abstracts.py.basta
C:\tmp_4c73x2e\lib\common\hashing.py
C:\tmp_4c73x2e\lib\common\exceptions.py.basta
C:\tmp_4c73x2e\lib\common\parse_pe.py
C:\tmp_4c73x2e\lib\common\defines.py.basta
C:\tmp_4c73x2e\lib\common\rand.py
C:\tmp_4c73x2e\lib\common\hashing.py.basta
C:\tmp_4c73x2e\lib\common\registry.py
C:\tmp_4c73x2e\lib\common\parse_pe.py.basta
C:\tmp_4c73x2e\lib\common\results.py
C:\tmp_4c73x2e\lib\common\rand.py.basta
C:\tmp_4c73x2e\lib\common\registry.py.basta
C:\tmp_4c73x2e\lib\common\results.py.basta
C:\tmp_4c73x2e\lib\common\errors.py.basta
C:\tmp_4c73x2e\data\yara\XWorm.yar.basta
C:\tmp_4c73x2e\lib\common\__pycache__\readme.txt
C:\tmp_4c73x2e\lib\core\*
C:\tmp_4c73x2e\lib\core\__pycache__\readme.txt
C:\tmp_4c73x2e\lib\__pycache__\*
C:\tmp_4c73x2e\modules\auxiliary\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\readme.txt
C:\tmp_4c73x2e\modules\packages\*
C:\tmp_4c73x2e\lib\common\zip_utils.py
C:\tmp_4c73x2e\lib\common\__init__.py
C:\tmp_4c73x2e\lib\common\__init__.py.basta
C:\tmp_4c73x2e\modules\packages\__pycache__\readme.txt
C:\tmp_4c73x2e\lib\core\compound.py
C:\tmp_4c73x2e\lib\common\zip_utils.py.basta
C:\tmp_4c73x2e\lib\core\config.py
C:\tmp_4c73x2e\lib\core\compound.py.basta
C:\tmp_4c73x2e\lib\core\log.py
C:\tmp_4c73x2e\lib\core\config.py.basta
C:\tmp_4c73x2e\lib\core\packages.py
C:\tmp_4c73x2e\lib\core\log.py.basta
C:\tmp_4c73x2e\lib\core\pipe.py
C:\tmp_4c73x2e\lib\core\packages.py.basta
C:\tmp_4c73x2e\lib\core\privileges.py
C:\tmp_4c73x2e\lib\core\pipe.py.basta
C:\tmp_4c73x2e\lib\core\startup.py
C:\tmp_4c73x2e\lib\core\privileges.py.basta
C:\tmp_4c73x2e\lib\core\__init__.py
C:\tmp_4c73x2e\lib\core\startup.py.basta
C:\tmp_4c73x2e\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__init__.py.basta
C:\tmp_4c73x2e\modules\auxiliary\amsi.py
C:\tmp_4c73x2e\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\amsi_collector.py
C:\tmp_4c73x2e\modules\auxiliary\amsi_collector.py.basta
C:\tmp_4c73x2e\modules\auxiliary\autoruns.py
C:\tmp_4c73x2e\modules\auxiliary\autoruns.py.basta
C:\tmp_4c73x2e\data\yara\Formbook.yar.basta
C:\tmp_4c73x2e\modules\auxiliary\amsi.py.basta
C:\tmp_4c73x2e\modules\auxiliary\browser.py
C:\tmp_4c73x2e\modules\auxiliary\curtain.py
C:\tmp_4c73x2e\modules\auxiliary\digisig.py
C:\tmp_4c73x2e\modules\auxiliary\disguise.py
C:\tmp_4c73x2e\modules\auxiliary\curtain.py.basta
C:\tmp_4c73x2e\modules\auxiliary\during_script.py
C:\tmp_4c73x2e\modules\auxiliary\during_script.py.basta
C:\tmp_4c73x2e\modules\auxiliary\evtx.py
C:\tmp_4c73x2e\modules\auxiliary\digisig.py.basta
C:\tmp_4c73x2e\modules\auxiliary\filepickup.py
C:\tmp_4c73x2e\modules\auxiliary\filepickup.py.basta
C:\tmp_4c73x2e\modules\auxiliary\html_scraper.py
C:\tmp_4c73x2e\modules\auxiliary\disguise.py.basta
C:\tmp_4c73x2e\modules\auxiliary\human.py
C:\tmp_4c73x2e\modules\auxiliary\html_scraper.py.basta
C:\tmp_4c73x2e\modules\auxiliary\permissions.py
C:\tmp_4c73x2e\modules\auxiliary\pre_script.py
C:\tmp_4c73x2e\modules\auxiliary\permissions.py.basta
C:\tmp_4c73x2e\modules\auxiliary\procmon.py
C:\tmp_4c73x2e\modules\auxiliary\recentfiles.py
C:\tmp_4c73x2e\modules\auxiliary\human.py.basta
C:\tmp_4c73x2e\modules\auxiliary\screenshots.py
C:\tmp_4c73x2e\modules\auxiliary\procmon.py.basta
C:\tmp_4c73x2e\modules\auxiliary\sysmon.py
C:\tmp_4c73x2e\modules\auxiliary\recentfiles.py.basta
C:\tmp_4c73x2e\modules\auxiliary\tlsdump.py
C:\tmp_4c73x2e\modules\auxiliary\screenshots.py.basta
C:\tmp_4c73x2e\modules\auxiliary\usage.py
C:\tmp_4c73x2e\modules\auxiliary\tlsdump.py.basta
C:\tmp_4c73x2e\modules\auxiliary\__init__.py
C:\tmp_4c73x2e\modules\auxiliary\__init__.py.basta
C:\tmp_4c73x2e\modules\packages\access.py
C:\tmp_4c73x2e\modules\packages\access.py.basta
C:\tmp_4c73x2e\modules\packages\applet.py
C:\tmp_4c73x2e\modules\packages\applet.py.basta
C:\tmp_4c73x2e\modules\packages\archive.py
C:\tmp_4c73x2e\modules\auxiliary\usage.py.basta
C:\tmp_4c73x2e\modules\packages\autoit.py
C:\tmp_4c73x2e\modules\packages\chm.py
C:\tmp_4c73x2e\modules\packages\autoit.py.basta
C:\tmp_4c73x2e\modules\packages\chrome.py
C:\tmp_4c73x2e\modules\packages\archive.py.basta
C:\tmp_4c73x2e\modules\packages\chromium.py
C:\tmp_4c73x2e\modules\packages\chm.py.basta
C:\tmp_4c73x2e\modules\packages\cpl.py
C:\tmp_4c73x2e\modules\packages\chromium.py.basta
C:\tmp_4c73x2e\modules\packages\dll.py
C:\tmp_4c73x2e\modules\packages\chrome.py.basta
C:\tmp_4c73x2e\modules\packages\doc.py
C:\tmp_4c73x2e\modules\packages\cpl.py.basta
C:\tmp_4c73x2e\modules\packages\doc2016.py
C:\tmp_4c73x2e\modules\packages\doc.py.basta
C:\tmp_4c73x2e\modules\packages\dll.py.basta
C:\tmp_4c73x2e\modules\packages\doc2016.py.basta
C:\tmp_4c73x2e\modules\packages\doc_antivm.py
C:\tmp_4c73x2e\modules\packages\edge.py
C:\tmp_4c73x2e\modules\packages\exe.py
C:\tmp_4c73x2e\modules\packages\firefox.py
C:\tmp_4c73x2e\modules\packages\generic.py
C:\tmp_4c73x2e\modules\packages\exe.py.basta
C:\tmp_4c73x2e\modules\packages\hta.py
C:\tmp_4c73x2e\modules\packages\firefox.py.basta
C:\tmp_4c73x2e\modules\packages\ichitaro.py
C:\tmp_4c73x2e\modules\packages\ie.py
C:\tmp_4c73x2e\modules\packages\ie.py.basta
C:\tmp_4c73x2e\modules\packages\inf.py
C:\tmp_4c73x2e\modules\packages\inp.py
C:\tmp_4c73x2e\modules\packages\jar.py
C:\tmp_4c73x2e\modules\packages\inf.py.basta
C:\tmp_4c73x2e\modules\packages\js.py
C:\tmp_4c73x2e\modules\packages\jar.py.basta
C:\tmp_4c73x2e\modules\packages\js_antivm.py
C:\tmp_4c73x2e\modules\packages\inp.py.basta
C:\tmp_4c73x2e\modules\packages\lnk.py
C:\tmp_4c73x2e\modules\packages\ichitaro.py.basta
C:\tmp_4c73x2e\modules\packages\msbuild.py
C:\tmp_4c73x2e\modules\packages\msg.py
C:\tmp_4c73x2e\modules\packages\msbuild.py.basta
C:\tmp_4c73x2e\modules\packages\msi.py
C:\tmp_4c73x2e\modules\packages\lnk.py.basta
C:\tmp_4c73x2e\modules\packages\msix.py
C:\tmp_4c73x2e\modules\packages\msi.py.basta
C:\tmp_4c73x2e\modules\packages\nsis.py
C:\tmp_4c73x2e\modules\packages\mht.py
C:\tmp_4c73x2e\modules\packages\mht.py.basta
C:\tmp_4c73x2e\modules\packages\ollydbg.py
C:\tmp_4c73x2e\modules\__pycache__\*
C:\tmp_4c73x2e\tests\lib\*
C:\tmp_4c73x2e\tests\lib\api\readme.txt
C:\tmp_4c73x2e\tests\lib\common\readme.txt
C:\tmp_4c73x2e\tests\modules\*
C:\tmp_4c73x2e\tests\modules\packages\readme.txt
C:\Users\All Users\Datos de programa\*
C:\Users\All Users\Datos de programa\Datos de programa
C:\tmp_4c73x2e\modules\packages\msg.py.basta
C:\Users\All Users\Datos de programa\Datos de programa\readme.txt
C:\Users\All Users\Datos de programa\Documentos
C:\tmp_4c73x2e\modules\packages\nsis.py.basta
C:\Users\All Users\Datos de programa\Documentos\readme.txt
C:\Users\All Users\Datos de programa\Escritorio
C:\tmp_4c73x2e\modules\packages\one.py
C:\tmp_4c73x2e\modules\packages\one.py.basta
C:\tmp_4c73x2e\modules\packages\ollydbg.py.basta
C:\tmp_4c73x2e\modules\packages\pdf.py
C:\tmp_4c73x2e\modules\packages\pdf.py.basta
C:\Users\All Users\Datos de programa\Escritorio\readme.txt
C:\tmp_4c73x2e\modules\packages\ppt.py
C:\tmp_4c73x2e\modules\packages\ppt2016.py
C:\tmp_4c73x2e\modules\packages\ppt.py.basta
C:\tmp_4c73x2e\modules\packages\ps1.py
C:\tmp_4c73x2e\modules\packages\ppt2016.py.basta
C:\tmp_4c73x2e\modules\packages\pub.py
C:\tmp_4c73x2e\modules\packages\pub2016.py
C:\tmp_4c73x2e\modules\packages\ps1.py.basta
C:\tmp_4c73x2e\modules\packages\python.py
C:\tmp_4c73x2e\modules\packages\rar.py
C:\tmp_4c73x2e\modules\packages\pub.py.basta
C:\tmp_4c73x2e\modules\packages\reg.py
C:\tmp_4c73x2e\modules\packages\regsvr.py
C:\tmp_4c73x2e\modules\packages\pub2016.py.basta
C:\tmp_4c73x2e\modules\packages\python.py.basta
C:\tmp_4c73x2e\modules\packages\reg.py.basta
C:\tmp_4c73x2e\modules\packages\regsvr.py.basta
C:\Users\All Users\Datos de programa\Men\xfa Inicio
C:\tmp_4c73x2e\modules\packages\sct.py
C:\tmp_4c73x2e\modules\packages\service.py
C:\tmp_4c73x2e\modules\packages\service_dll.py
C:\tmp_4c73x2e\modules\packages\service.py.basta
C:\tmp_4c73x2e\modules\packages\Shellcode-Unpacker.py
C:\tmp_4c73x2e\modules\packages\Shellcode.py
C:\tmp_4c73x2e\modules\packages\service_dll.py.basta
C:\tmp_4c73x2e\modules\packages\Shellcode_x64.py
C:\tmp_4c73x2e\modules\packages\swf.py
C:\tmp_4c73x2e\modules\packages\Unpacker.py
C:\tmp_4c73x2e\modules\packages\Shellcode.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_dll.py
C:\tmp_4c73x2e\modules\packages\Unpacker_js.py
C:\tmp_4c73x2e\modules\packages\swf.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_ps1.py
C:\tmp_4c73x2e\modules\packages\Unpacker_dll.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_ps1.py.basta
C:\tmp_4c73x2e\modules\packages\rar.py.basta
C:\Users\All Users\Datos de programa\Men\xfa Inicio\readme.txt
C:\tmp_4c73x2e\modules\packages\Unpacker_regsvr.py
C:\tmp_4c73x2e\modules\packages\Unpacker_zip.py
C:\tmp_4c73x2e\modules\packages\Unpacker_regsvr.py.basta
C:\tmp_4c73x2e\modules\packages\vawtrak.py
C:\tmp_4c73x2e\modules\packages\vbejse.py
C:\tmp_4c73x2e\modules\packages\vbs.py
C:\tmp_4c73x2e\modules\packages\vawtrak.py.basta
C:\tmp_4c73x2e\modules\packages\wsf.py
C:\tmp_4c73x2e\modules\packages\xls.py
C:\tmp_4c73x2e\modules\packages\xls2016.py
C:\tmp_4c73x2e\modules\packages\xps.py
C:\tmp_4c73x2e\modules\packages\xslt.py
C:\tmp_4c73x2e\modules\packages\zip.py
C:\Users\All Users\Datos de programa\Microsoft\readme.txt
C:\Users\All Users\Datos de programa\Microsoft OneDrive\readme.txt
C:\Users\All Users\Datos de programa\Package Cache\readme.txt
C:\Users\All Users\Datos de programa\Packages\readme.txt
C:\Users\All Users\Datos de programa\Plantillas
C:\tmp_4c73x2e\modules\packages\vbs.py.basta
C:\Users\All Users\Datos de programa\Plantillas\readme.txt
C:\tmp_4c73x2e\modules\packages\zip_compound.py
C:\Users\All Users\Datos de programa\regid.1991-06.com.microsoft\readme.txt
C:\tmp_4c73x2e\modules\packages\wsf.py.basta
C:\tmp_4c73x2e\modules\packages\xls.py.basta
C:\tmp_4c73x2e\modules\packages\__init__.py
C:\tmp_4c73x2e\modules\__pycache__\__init__.cpython-310.pyc
C:\Users\All Users\Datos de programa\SoftwareDistribution\readme.txt
C:\Users\All Users\Datos de programa\ssh\readme.txt
C:\Users\All Users\Datos de programa\USOPrivate\readme.txt
C:\Users\All Users\Datos de programa\USOShared\readme.txt
C:\Users\All Users\Documentos\*
C:\Users\All Users\Documentos\Mi m\xfasica
C:\tmp_4c73x2e\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__init__.py.basta
C:\tmp_4c73x2e\modules\packages\xls2016.py.basta
C:\tmp_4c73x2e\modules\packages\zip.py.basta
C:\tmp_4c73x2e\modules\packages\zip_compound.py.basta
C:\tmp_4c73x2e\modules\packages\xps.py.basta
C:\Users\All Users\Documentos\Mi m\xfasica\readme.txt
C:\Users\All Users\Documentos\desktop.ini
C:\Users\All Users\Documentos\Mis im\xe1genes
C:\Users\All Users\Documentos\Mis im\xe1genes\readme.txt
C:\Users\All Users\Documentos\Mis v\xeddeos
C:\Users\All Users\Documentos\Mis v\xeddeos\readme.txt
C:\Users\All Users\Escritorio\*
C:\Users\All Users\Men\xfa Inicio\*
C:\Users\All Users\Men\xfa Inicio\Programas
C:\Users\All Users\Men\xfa Inicio\Programas\readme.txt
C:\Users\All Users\Escritorio\desktop.ini
C:\Users\All Users\Escritorio\Google Chrome.lnk.basta
C:\Users\All Users\Escritorio\Microsoft Edge.lnk.basta
C:\Users\All Users\Escritorio\VLC media player.lnk.basta
C:\Users\All Users\Men\xfa Inicio\desktop.ini
C:\Users\All Users\Men\xfa Inicio\Programs\readme.txt
C:\Users\All Users\Microsoft\*
C:\Users\All Users\Microsoft\Crypto\readme.txt
C:\Users\All Users\Microsoft\Device Stage\readme.txt
C:\Users\All Users\Microsoft\DeviceSync\readme.txt
C:\Users\All Users\Microsoft\Diagnosis\readme.txt
C:\Users\All Users\Microsoft\DiagnosticLogCSP\readme.txt
C:\Users\All Users\Microsoft\DRM\readme.txt
C:\Users\All Users\Microsoft\EdgeUpdate\readme.txt
C:\Users\All Users\Microsoft\Event Viewer\readme.txt
C:\Users\All Users\Microsoft\IdentityCRL\readme.txt
C:\Users\All Users\Microsoft\MapData\readme.txt
C:\Users\All Users\Microsoft\MF\readme.txt
C:\Users\All Users\Microsoft\NetFramework\readme.txt
C:\Users\All Users\Microsoft\Network\readme.txt
C:\Users\All Users\Microsoft\Provisioning\readme.txt
C:\Users\All Users\Microsoft\Search\readme.txt
C:\Users\All Users\Microsoft\Settings\readme.txt
C:\Users\All Users\Microsoft\SmsRouter\readme.txt
C:\Users\All Users\Microsoft\Spectrum\readme.txt
C:\Users\All Users\Microsoft\Speech_OneCore\readme.txt
C:\Users\All Users\Microsoft\Storage Health\readme.txt
C:\Users\All Users\Microsoft\User Account Pictures\readme.txt
C:\Users\All Users\Microsoft\Vault\readme.txt
C:\Users\All Users\Microsoft\WDF\readme.txt
C:\Users\All Users\Microsoft\WinMSIPC\readme.txt
C:\Users\All Users\Microsoft\WwanSvc\readme.txt
C:\Users\All Users\Microsoft OneDrive\*
C:\Users\All Users\Microsoft OneDrive\setup\readme.txt
C:\Users\All Users\Package Cache\*
C:\Users\All Users\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\readme.txt
C:\Users\All Users\Packages\*
C:\Users\All Users\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\readme.txt
C:\Users\All Users\Plantillas\*
C:\Users\All Users\regid.1991-06.com.microsoft\*
C:\Users\All Users\SoftwareDistribution\*
C:\Users\All Users\ssh\*
C:\Users\All Users\USOPrivate\*
C:\Users\All Users\USOPrivate\UpdateStore\readme.txt
C:\Users\All Users\USOShared\*
C:\Users\All Users\USOShared\Logs\readme.txt
C:\Users\Default\AppData\*
C:\Users\Default\AppData\Local\readme.txt
C:\Users\Default\AppData\Roaming\readme.txt
C:\Users\Default\Configuraci\xf3n local\*
C:\Users\Default\Configuraci\xf3n local\Archivos temporales de Internet
C:\Users\Default\Configuraci\xf3n local\Archivos temporales de Internet\readme.txt
C:\Users\Default\Configuraci\xf3n local\Datos de programa
C:\Users\Default\Configuraci\xf3n local\Datos de programa\readme.txt
C:\Users\Default\Configuraci\xf3n local\Historial
C:\Users\Default\Configuraci\xf3n local\Historial\readme.txt
C:\Users\Default\Configuraci\xf3n local\Microsoft\readme.txt
C:\Users\Default\Configuraci\xf3n local\Temp\readme.txt
C:\Users\Default\Cookies\*
C:\Users\Default\Datos de programa\*
C:\Users\Default\Datos de programa\Microsoft\readme.txt
C:\Users\Default\Desktop\*
C:\Users\Default\Documents\*
C:\Users\Default\Documents\Mi m\xfasica
C:\Users\Default\Documents\Mi m\xfasica\readme.txt
C:\Users\Default\Documents\Mis im\xe1genes
C:\Users\Default\Documents\Mis im\xe1genes\readme.txt
C:\Users\Default\Documents\Mis v\xeddeos
C:\Users\Default\Documents\Mis v\xeddeos\readme.txt
C:\Users\Default\Downloads\*
C:\Users\Default\Entorno de red\*
C:\Users\Default\Favorites\*
C:\Users\Default\Impresoras\*
C:\Users\Default\Links\*
C:\Users\Default\Men\xfa Inicio\*
C:\Users\Default\Men\xfa Inicio\Programas
C:\Users\Default\Men\xfa Inicio\Programas\readme.txt
C:\Users\Default\Men\xfa Inicio\Programs\readme.txt
C:\Users\Default\Mis documentos\*
C:\Users\Default\Mis documentos\Mi m\xfasica
C:\Users\Default\Mis documentos\Mi m\xfasica\readme.txt
C:\Users\Default\Mis documentos\Mis im\xe1genes
C:\Users\Default\Mis documentos\Mis im\xe1genes\readme.txt
C:\Users\Default\Mis documentos\Mis v\xeddeos
C:\Users\Default\Mis documentos\Mis v\xeddeos\readme.txt
C:\Users\Default\Music\*
C:\Users\Default\Pictures\*
C:\Users\Default\Plantillas\*
C:\Users\Default\Reciente\*
C:\Users\Default\Saved Games\*
C:\Users\Default\SendTo\*
C:\Users\Default\Videos\*
C:\Users\Default User\AppData\*
C:\Users\Default User\AppData\Local\readme.txt
C:\Users\Default\SendTo\Compressed (zipped) Folder.ZFSendToTarget
C:\Users\Default\SendTo\Compressed (zipped) Folder.ZFSendToTarget.basta
C:\Users\Default\SendTo\Desktop (create shortcut).DeskLink
C:\Users\Default\SendTo\Desktop (create shortcut).DeskLink.basta
C:\Users\Default\SendTo\desktop.ini
C:\Users\Default\SendTo\Fax Recipient.lnk
C:\Users\Default\SendTo\Mail Recipient.MAPIMail
C:\Users\Default\SendTo\Fax Recipient.lnk.basta
C:\Users\Default\SendTo\Mail Recipient.MAPIMail.basta
C:\Users\Default User\AppData\Roaming\readme.txt
C:\Users\Default User\Configuraci\xf3n local\*
C:\Users\Default User\Configuraci\xf3n local\Archivos temporales de Internet
C:\Users\Default User\Configuraci\xf3n local\Archivos temporales de Internet\readme.txt
C:\Users\Default User\Configuraci\xf3n local\Datos de programa
C:\Users\Default User\Configuraci\xf3n local\Datos de programa\readme.txt
C:\Users\Default User\Configuraci\xf3n local\Historial
C:\Users\Default User\Configuraci\xf3n local\Historial\readme.txt
C:\Users\Default User\Configuraci\xf3n local\Microsoft\readme.txt
C:\Users\Default User\Configuraci\xf3n local\Temp\readme.txt
C:\Users\Default User\Cookies\*
C:\Users\Default User\Datos de programa\*
C:\Users\Default User\Datos de programa\Microsoft\readme.txt
C:\Users\Default User\Desktop\*
C:\Users\Default User\Documents\*
C:\Users\Default User\Documents\Mi m\xfasica
C:\Users\Default User\Documents\Mi m\xfasica\readme.txt
C:\Users\Default User\Documents\Mis im\xe1genes
C:\Users\Default User\Documents\Mis im\xe1genes\readme.txt
C:\Users\Default User\Documents\Mis v\xeddeos
C:\Users\Default User\Documents\Mis v\xeddeos\readme.txt
C:\Users\Default User\Downloads\*
C:\Users\Default User\Entorno de red\*
C:\Users\Default User\Favorites\*
C:\Users\Default User\Impresoras\*
C:\Users\Default User\Links\*
C:\Users\Default User\Men\xfa Inicio\*
C:\Users\Default User\Men\xfa Inicio\Programas
C:\Users\Default User\Men\xfa Inicio\Programas\readme.txt
C:\Users\Default User\Men\xfa Inicio\Programs\readme.txt
C:\Users\Default User\Mis documentos\*
C:\Users\Default User\Mis documentos\Mi m\xfasica
C:\Users\Default User\Mis documentos\Mi m\xfasica\readme.txt
C:\Users\Default User\Mis documentos\Mis im\xe1genes
C:\Users\Default User\Mis documentos\Mis im\xe1genes\readme.txt
C:\Users\Default User\Mis documentos\Mis v\xeddeos
C:\Users\Default User\Mis documentos\Mis v\xeddeos\readme.txt
C:\Users\Default User\Music\*
C:\Users\Default User\Pictures\*
C:\Users\Default User\Plantillas\*
C:\Users\Default User\Reciente\*
C:\Users\Default User\Saved Games\*
C:\Users\Default User\SendTo\*
C:\Users\Default User\SendTo\Compressed (zipped) Folder.ZFSendToTarget.basta
C:\Users\Default User\SendTo\Desktop (create shortcut).DeskLink.basta
C:\Users\Default User\SendTo\desktop.ini
C:\Users\Default User\SendTo\Fax Recipient.lnk.basta
C:\Users\Default User\SendTo\Mail Recipient.MAPIMail.basta
C:\Users\Default User\Videos\*
C:\Users\pacop\3D Objects\*
C:\Users\pacop\3D Objects\desktop.ini
C:\Users\pacop\AppData\*
C:\Users\pacop\AppData\Local\readme.txt
C:\Users\pacop\AppData\LocalLow\readme.txt
C:\Users\pacop\AppData\Roaming\readme.txt
C:\Users\pacop\Configuraci\xf3n local\*
C:\Users\pacop\Configuraci\xf3n local\Archivos temporales de Internet
C:\Users\pacop\Configuraci\xf3n local\Archivos temporales de Internet\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Comms\readme.txt
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\readme.txt
C:\Users\pacop\Configuraci\xf3n local\D3DSCache\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Datos de programa
C:\Users\pacop\Configuraci\xf3n local\Datos de programa\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Google\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Historial
C:\Users\pacop\Configuraci\xf3n local\Historial\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Microsoft\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Package Cache\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Packages\readme.txt
C:\Users\pacop\Configuraci\xf3n local\pip\readme.txt
C:\Users\pacop\Configuraci\xf3n local\PlaceholderTileLogoFolder\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Programs\readme.txt
C:\Users\pacop\Configuraci\xf3n local\Publishers\readme.txt
C:\Users\pacop\Configuraci\xf3n local\IconCache.db
C:\Users\pacop\Configuraci\xf3n local\Temp\readme.txt
C:\Users\pacop\Configuraci\xf3n local\VirtualStore\readme.txt
C:\Users\pacop\Contacts\*
C:\Users\pacop\Cookies\*
C:\Users\pacop\Cookies\DNTException\readme.txt
C:\Users\pacop\Cookies\ESE\readme.txt
C:\Users\pacop\Cookies\Low\readme.txt
C:\Users\pacop\Configuraci\xf3n local\IconCache.db.basta
C:\Users\pacop\Cookies\PrivacIE\readme.txt
C:\Users\pacop\Datos de programa\*
C:\Users\pacop\Datos de programa\Adobe\readme.txt
C:\Users\pacop\Datos de programa\Microsoft\readme.txt
C:\Users\pacop\Desktop\*
C:\Users\pacop\Contacts\desktop.ini
C:\Users\pacop\Cookies\deprecated.cookie
C:\Users\pacop\Cookies\deprecated.cookie.basta
C:\Users\pacop\Desktop\cosas\readme.txt
C:\Users\pacop\Documents\*
C:\Users\pacop\Documents\Mi m\xfasica
C:\Users\pacop\Documents\Mi m\xfasica\readme.txt
C:\Users\pacop\Desktop\descarga.jpg
C:\Users\pacop\Desktop\descarga.jpg.basta
C:\Users\pacop\Desktop\desktop.ini
C:\Users\pacop\Documents\desktop.ini
C:\Users\pacop\Documents\Mis im\xe1genes
C:\Users\pacop\Documents\Mis im\xe1genes\readme.txt
C:\Users\pacop\Documents\Mis v\xeddeos
C:\Users\pacop\Documents\Mis v\xeddeos\readme.txt
C:\Users\pacop\Downloads\*
C:\Users\pacop\Entorno de red\*
C:\Users\pacop\Favorites\*
C:\Users\pacop\Favorites\Links\readme.txt
C:\Users\pacop\Impresoras\*
C:\Users\pacop\Links\*
C:\Users\pacop\Men\xfa Inicio\*
C:\Users\pacop\Downloads\7z2407-x64.exe
C:\Users\pacop\Downloads\ChromeSetup.exe
C:\Users\pacop\Downloads\desktop.ini
C:\Users\pacop\Downloads\ndp48-web.exe
C:\Users\pacop\Downloads\pizza.pyw
C:\Users\pacop\Downloads\python-3.10.6.exe
C:\Users\pacop\Downloads\registros_v2.ps1
C:\Users\pacop\Downloads\registros_v2.ps1.basta
C:\Users\pacop\Downloads\vlc-3.0.21-win64.exe
C:\Users\pacop\Men\xfa Inicio\Programas
C:\Users\pacop\Men\xfa Inicio\Programas\readme.txt
C:\Users\pacop\Downloads\pizza.pyw.basta
C:\Users\pacop\Favorites\Bing.url
C:\Users\pacop\Mis documentos\*
C:\Users\pacop\Mis documentos\Mi m\xfasica
C:\Users\pacop\Favorites\Bing.url.basta
C:\Users\pacop\Mis documentos\Mi m\xfasica\readme.txt
C:\Users\pacop\Favorites\desktop.ini
C:\Users\pacop\Links\desktop.ini
C:\Users\pacop\Links\Desktop.lnk
C:\Users\pacop\Mis documentos\Mis im\xe1genes
C:\Users\pacop\Mis documentos\Mis im\xe1genes\readme.txt
C:\Users\pacop\Mis documentos\Mis v\xeddeos
C:\Users\pacop\Links\Desktop.lnk.basta
C:\Users\pacop\Mis documentos\Mis v\xeddeos\readme.txt
C:\Users\pacop\Links\Downloads.lnk
C:\Users\pacop\OneDrive\*
C:\Users\pacop\Pictures\*
C:\Users\pacop\Pictures\Camera Roll\readme.txt
C:\Users\pacop\Pictures\Saved Pictures\readme.txt
C:\Users\pacop\Plantillas\*
C:\Users\pacop\Men\xfa Inicio\desktop.ini
C:\Users\pacop\Reciente\*
C:\Users\pacop\Music\desktop.ini
C:\Users\pacop\OneDrive\desktop.ini
C:\Users\pacop\Pictures\desktop.ini
C:\Users\pacop\Reciente\AutomaticDestinations\readme.txt
C:\Users\pacop\Reciente\CustomDestinations\readme.txt
C:\Users\pacop\Saved Games\*
C:\Users\pacop\Searches\*
C:\Users\pacop\SendTo\*
C:\Users\pacop\Reciente\a.lnk
C:\Users\pacop\Reciente\a.lnk.basta
C:\Users\pacop\Reciente\cambios.lnk
C:\Users\pacop\Reciente\cambios.lnk.basta
C:\Users\pacop\Reciente\compra (2).lnk
C:\Users\pacop\Reciente\compra (2).lnk.basta
C:\Users\pacop\Reciente\compra.lnk
C:\Users\pacop\Reciente\compra.lnk.basta
C:\Users\pacop\Reciente\cosas.lnk
C:\Users\pacop\Reciente\cosas.lnk.basta
C:\Users\pacop\Reciente\desactivardisp.lnk
C:\Users\pacop\Reciente\desactivardisp.lnk.basta
C:\Users\pacop\Reciente\descarga (1).lnk
C:\Users\pacop\Videos\*
C:\Users\pacop\Videos\Captures\readme.txt
C:\Users\Public\AccountPictures\*
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\Users\Public\Desktop\*
C:\Users\pacop\Reciente\descarga (1).lnk.basta
C:\Users\pacop\Reciente\descarga.lnk
C:\Users\pacop\Reciente\descarga.lnk.basta
C:\Users\pacop\Reciente\Descargas.lnk
C:\Users\pacop\Reciente\Descargas.lnk.basta
C:\Users\pacop\Reciente\desktop.ini
C:\Users\pacop\Reciente\Disco local (C) (2).lnk
C:\Users\pacop\Reciente\Disco local (C) (2).lnk.basta
C:\Users\pacop\Reciente\Disco local (C).lnk
C:\Users\Public\Documents\*
C:\Users\Public\Documents\Mi m\xfasica
C:\Users\Public\Documents\Mi m\xfasica\readme.txt
C:\Users\Public\Documents\Mis im\xe1genes
C:\Users\Public\Documents\Mis im\xe1genes\readme.txt
C:\Users\pacop\Reciente\Disco local (C).lnk.basta
C:\Users\Public\Documents\Mis v\xeddeos
C:\Users\Public\Documents\Mis v\xeddeos\readme.txt
C:\Users\Public\Downloads\*
C:\Users\pacop\Reciente\Este equipo.lnk
C:\Users\Public\Music\*
C:\Users\pacop\Reciente\Este equipo.lnk.basta
C:\Users\pacop\Reciente\images.lnk
C:\Users\pacop\Reciente\images.lnk.basta
C:\Users\pacop\Reciente\Internet.lnk
C:\Users\Public\Pictures\*
C:\Users\Public\Videos\*
C:\Users\pacop\Reciente\Internet.lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay---.lnk
C:\Users\pacop\Reciente\ms-gamingoverlay---.lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck- (2).lnk
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck- (2).lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck-.lnk
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck-.lnk.basta
C:\Users\pacop\Reciente\ms-settingsnetwork-ethernet.lnk
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ar-SA\readme.txt
C:\Users\pacop\Reciente\ms-settingsnetwork-ethernet.lnk.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\bg-BG\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\cs-CZ\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\da-DK\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\el-GR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-GB\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-MX\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\et-EE\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fi-FI\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fr-CA\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fr-FR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fsdefinitions\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\he-IL\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\hr-HR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\hu-HU\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\HWRCustomization\readme.txt
C:\Users\pacop\Reciente\ms-settingsnetwork.lnk
C:\Users\pacop\Reciente\ms-settingsnetwork.lnk.basta
C:\Users\pacop\Reciente\ms-settingswindowsupdate.lnk
C:\Users\pacop\Reciente\ms-settingswindowsupdate.lnk.basta
C:\Users\pacop\Reciente\pizza.lnk
C:\Users\pacop\Reciente\pizza.lnk.basta
C:\Users\pacop\Reciente\prueba.lnk
C:\Users\pacop\Reciente\prueba.lnk.basta
C:\Users\pacop\Reciente\raton (2).lnk
C:\Users\pacop\Reciente\raton (2).lnk.basta
C:\Users\pacop\Reciente\raton.lnk
C:\Users\pacop\Reciente\raton.lnk.basta
C:\Users\pacop\Reciente\red.lnk
C:\Users\pacop\Reciente\red.lnk.basta
C:\Users\pacop\Reciente\registros.lnk
C:\Users\pacop\Reciente\registros.lnk.basta
C:\Users\pacop\Reciente\registros_v2.lnk
C:\Users\pacop\Reciente\registros_v2.lnk.basta
C:\Users\pacop\Reciente\test.lnk
C:\Users\pacop\Reciente\test.lnk.basta
C:\Users\pacop\Reciente\Trabajo.lnk
C:\Users\pacop\Reciente\Trabajo.lnk.basta
C:\Users\pacop\Reciente\windowsdefender--enablertp-.lnk
C:\Users\pacop\Reciente\windowsdefender--enablertp-.lnk.basta
C:\Users\pacop\Saved Games\desktop.ini
C:\Users\pacop\Searches\desktop.ini
C:\Users\pacop\Searches\Everywhere.search-ms
C:\Users\pacop\Searches\Everywhere.search-ms.basta
C:\Users\pacop\Searches\Indexed Locations.search-ms
C:\Users\pacop\Searches\Indexed Locations.search-ms.basta
C:\Users\pacop\Searches\winrt--{S-1-5-21-3747987639-2506909737-3802746916-1001}-.searchconnector-ms
C:\Users\pacop\Searches\winrt--{S-1-5-21-3747987639-2506909737-3802746916-1001}-.searchconnector-ms.basta
C:\Users\pacop\SendTo\Compressed (zipped) Folder.ZFSendToTarget
C:\Users\pacop\SendTo\Compressed (zipped) Folder.ZFSendToTarget.basta
C:\Users\pacop\SendTo\Desktop (create shortcut).DeskLink
C:\Users\pacop\SendTo\Desktop (create shortcut).DeskLink.basta
C:\Users\pacop\SendTo\Documentos.mydocs
C:\Users\pacop\SendTo\Documentos.mydocs.basta
C:\Users\pacop\SendTo\Fax Recipient.lnk
C:\Users\pacop\SendTo\Fax Recipient.lnk.basta
C:\Users\pacop\SendTo\Mail Recipient.MAPIMail
C:\Users\pacop\SendTo\Mail Recipient.MAPIMail.basta
C:\Users\pacop\SendTo\Transferencia de archivos Bluetooth.LNK
C:\Users\pacop\SendTo\Transferencia de archivos Bluetooth.LNK.basta
C:\Users\Public\Libraries\RecordedTV.library-ms
C:\Users\Public\Libraries\RecordedTV.library-ms.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ko-KR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\LanguageModel\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipsptb.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\lt-LT\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipsptg.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\lv-LV\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipsrom.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipsrus.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipssrb.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\nb-NO\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipssrl.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\nl-NL\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipssve.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pl-PL\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ipstr.xml
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pt-BR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\micaut.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pt-PT\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\Microsoft.Ink.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ro-RO\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\mip.exe
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ru-RU\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\mraut.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sk-SK\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\mshwgst.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sl-SI\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\mshwLatin.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sr-Latn-RS\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\rtscom.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ShapeCollector.exe
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\TabIpsps.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\th-TH\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tabskb.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tr-TR\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\uk-UA\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\zh-CN\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\zh-TW\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\TabTip.exe
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ThirdPartyNotices.MSHWLatin.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\TipRes.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tipresx.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tipskins.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tiptsf.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tpcps.dll
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\*
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\es-ES\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\Stationery\*
C:\Archivos de programa\Archivos comunes\microsoft shared\TextConv\*
C:\Archivos de programa\Archivos comunes\microsoft shared\TextConv\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\Triedit\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\microsoft shared\VGX\*
C:\Archivos de programa\Archivos comunes\System\ado\*
C:\Users\pacop\Downloads\7z2407-x64.exe.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\msinfo32.exe
C:\Archivos de programa\Archivos comunes\microsoft shared\VGX\VGX.dll
C:\Archivos de programa\Archivos comunes\System\ado\adojavas.inc
C:\Archivos de programa\Archivos comunes\System\ado\es-ES\readme.txt
C:\Archivos de programa\Archivos comunes\System\en-US\*
C:\Archivos de programa\Archivos comunes\System\es-ES\*
C:\Archivos de programa\Archivos comunes\System\msadc\*
C:\Archivos de programa\Archivos comunes\System\msadc\en-US\readme.txt
C:\Archivos de programa\Archivos comunes\System\ado\msado15.dll
C:\Archivos de programa\Archivos comunes\System\ado\msado20.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msado21.tlb
C:\Archivos de programa\Archivos comunes\System\Ole DB\*
C:\Archivos de programa\Archivos comunes\System\Ole DB\en-US\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\*
C:\Archivos de programa\Archivos comunes\System\ado\msado25.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msado26.tlb
C:\Archivos de programa\Common Files\microsoft shared\ink\ar-SA\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\bg-BG\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\cs-CZ\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\da-DK\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\de-DE\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\el-GR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\en-GB\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\en-US\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\es-ES\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\et-EE\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\fi-FI\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\fr-CA\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\fr-FR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\fsdefinitions\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\hr-HR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\hu-HU\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\HWRCustomization\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\it-IT\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\ja-JP\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\ko-KR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\LanguageModel\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\lt-LT\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\lv-LV\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\nb-NO\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\nl-NL\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\pl-PL\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\pt-BR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\pt-PT\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\ro-RO\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\ru-RU\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\sk-SK\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\sr-Latn-RS\readme.txt
C:\Archivos de programa\Archivos comunes\System\ado\msado27.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msado28.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msado60.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msadomd.dll
C:\Archivos de programa\Archivos comunes\System\ado\msadomd28.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msador15.dll
C:\Archivos de programa\Archivos comunes\System\ado\msador28.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msadox.dll
C:\Archivos de programa\Archivos comunes\System\ado\msadox28.tlb
C:\Archivos de programa\Archivos comunes\System\ado\msadrh15.dll
C:\Archivos de programa\Archivos comunes\System\es-ES\wab32res.dll.mui
C:\Archivos de programa\Archivos comunes\System\msadc\adcjavas.inc
C:\Archivos de programa\Archivos comunes\System\msadc\adcvbs.inc
C:\Archivos de programa\Archivos comunes\System\msadc\msadce.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msadcer.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msadco.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msadcor.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msadds.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msaddsr.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msdaprsr.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msdaprst.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msdarem.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msdaremr.dll
C:\Archivos de programa\Archivos comunes\System\msadc\msdfmap.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaosp.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaps.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msdasql.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msdasqlr.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msdatl3.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\msxactps.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\oledb32.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\oledb32r.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\oledbjvs.inc
C:\Archivos de programa\Archivos comunes\System\Ole DB\oledbvbs.inc
C:\Archivos de programa\Archivos comunes\System\Ole DB\sqloledb.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\sqloledb.rll
C:\Users\pacop\Downloads\ndp48-web.exe.basta
C:\Archivos de programa\Archivos comunes\System\Ole DB\sqlxmlx.dll
C:\Archivos de programa\Archivos comunes\System\Ole DB\sqlxmlx.rll
C:\Archivos de programa\Common Files\microsoft shared\ink\Alphabet.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\Content.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\hwrcommonlm.dat
C:\Archivos de programa\Common Files\microsoft shared\ink\hwresplm.dat
C:\Archivos de programa\Common Files\microsoft shared\ink\hwrespsh.dat
C:\Archivos de programa\Common Files\microsoft shared\ink\hwrlatinlm.dat
C:\Archivos de programa\Common Files\microsoft shared\ink\InkDiv.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\InkObj.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\InputPersonalization.exe
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsar.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipscat.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipschs.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipscht.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipscsy.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsdan.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsdeu.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsel.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsen.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsesp.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsfin.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsfra.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipshe.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipshi.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipshrv.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsid.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsita.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsjpn.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipskor.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\IpsMigrationPlugin.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsnld.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsnor.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsplk.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\IpsPlugin.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsptb.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsptg.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsrom.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipsrus.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipssrb.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipssrl.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipssve.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\ipstr.xml
C:\Archivos de programa\Common Files\microsoft shared\ink\micaut.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\Microsoft.Ink.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\mip.exe
C:\Archivos de programa\Common Files\microsoft shared\ink\mraut.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\mshwgst.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\mshwLatin.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\rtscom.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\ShapeCollector.exe
C:\Archivos de programa\Common Files\microsoft shared\ink\sv-SE\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\th-TH\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\tr-TR\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\uk-UA\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\zh-CN\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\zh-TW\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\*
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\en-US\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\es-ES\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\Stationery\*
C:\Archivos de programa\Common Files\microsoft shared\TextConv\*
C:\Archivos de programa\Common Files\microsoft shared\TextConv\en-US\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\Triedit\*
C:\Archivos de programa\Common Files\microsoft shared\Triedit\en-US\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\VGX\*
C:\Archivos de programa\Common Files\System\ado\*
C:\Archivos de programa\Common Files\System\ado\en-US\readme.txt
C:\Archivos de programa\Common Files\System\ado\es-ES\readme.txt
C:\Archivos de programa\Common Files\System\en-US\*
C:\Archivos de programa\Common Files\System\es-ES\*
C:\Archivos de programa\Common Files\System\msadc\*
C:\Archivos de programa\Common Files\System\msadc\en-US\readme.txt
C:\Archivos de programa\Common Files\System\msadc\es-ES\readme.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\TabIpsps.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\tabskb.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\TabTip.exe
C:\Archivos de programa\Common Files\microsoft shared\ink\ThirdPartyNotices.MSHWLatin.txt
C:\Archivos de programa\Common Files\microsoft shared\ink\TipRes.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\tipresx.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\tipskins.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\tiptsf.dll
C:\Archivos de programa\Common Files\microsoft shared\ink\tpcps.dll
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\msinfo32.exe
C:\Archivos de programa\Common Files\microsoft shared\VGX\VGX.dll
C:\Archivos de programa\Common Files\System\ado\adojavas.inc
C:\Archivos de programa\Common Files\System\ado\adovbs.inc
C:\Archivos de programa\Common Files\System\ado\msader15.dll
C:\Archivos de programa\Common Files\System\ado\msado15.dll
C:\Archivos de programa\Common Files\System\ado\msado20.tlb
C:\Archivos de programa\Common Files\System\ado\msado21.tlb
C:\Archivos de programa\Common Files\System\ado\msado25.tlb
C:\Archivos de programa\Common Files\System\ado\msado26.tlb
C:\Archivos de programa\Common Files\System\ado\msado27.tlb
C:\Archivos de programa\Common Files\System\ado\msado28.tlb
C:\Archivos de programa\Common Files\System\ado\msado60.tlb
C:\Archivos de programa\Common Files\System\ado\msadomd.dll
C:\Archivos de programa\Common Files\System\ado\msadomd28.tlb
C:\Archivos de programa\Common Files\System\ado\msador15.dll
C:\Archivos de programa\Common Files\System\ado\msador28.tlb
C:\Archivos de programa\Common Files\System\ado\msadox.dll
C:\Archivos de programa\Common Files\System\ado\msadox28.tlb
C:\Archivos de programa\Common Files\System\ado\msadrh15.dll
C:\Archivos de programa\Common Files\System\es-ES\wab32res.dll.mui
C:\Archivos de programa\Common Files\System\msadc\adcjavas.inc
C:\Archivos de programa\Common Files\System\msadc\adcvbs.inc
C:\Archivos de programa\Common Files\System\msadc\msadce.dll
C:\Archivos de programa\Common Files\System\msadc\msadcer.dll
C:\Archivos de programa\Common Files\System\msadc\msadco.dll
C:\Archivos de programa\Common Files\System\msadc\msadcor.dll
C:\Archivos de programa\Common Files\System\msadc\msadds.dll
C:\Archivos de programa\Common Files\System\msadc\msaddsr.dll
C:\Archivos de programa\Common Files\System\msadc\msdaprsr.dll
C:\Archivos de programa\Common Files\System\msadc\msdaprst.dll
C:\Archivos de programa\Common Files\System\msadc\msdarem.dll
C:\Archivos de programa\Common Files\System\msadc\msdaremr.dll
C:\Archivos de programa\Common Files\System\msadc\msdfmap.dll
C:\Archivos de programa\Common Files\System\Ole DB\*
C:\Archivos de programa\Common Files\System\Ole DB\en-US\readme.txt
C:\Archivos de programa\Common Files\System\Ole DB\es-ES\readme.txt
C:\Archivos de programa\Google\Chrome\Application\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\readme.txt
C:\Archivos de programa\Google\Chrome\Application\SetupMetrics\readme.txt
C:\Archivos de programa\Google\Chrome\Temp\*
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\readme.txt
C:\Archivos de programa\VideoLAN\VLC\hrtfs\*
C:\Archivos de programa\VideoLAN\VLC\locale\*
C:\Archivos de programa\VideoLAN\VLC\locale\ach\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\af\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\am\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\am_ET\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\an\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ar\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ast\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\as_IN\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\be\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\bg\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\bn\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\bn_IN\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\br\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\brx\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\bs\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ca\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ca@valencia\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\cgg\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\co\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\cs\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\cy\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\da\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\de\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\el\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\en_GB\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\eo\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\es\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\es_MX\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\et\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\eu\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\fa\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ff\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\fi\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\fr\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\fur\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\fy\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ga\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\gd\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\gl\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\gu\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\he\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\hi\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\hr\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\hu\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\hy\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\id\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ie\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\is\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\it\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ja\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ka\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\kab\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\kk\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\km\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\kn\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ko\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ks_IN\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ku_IQ\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ky\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\lg\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\lo\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\lt\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\lv\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\mai\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\mk\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ml\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\mn\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\mr\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ms\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\my\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\nb\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ne\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\nl\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\nn\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\oc\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\or_IN\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\pa\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\pl\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ps\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\pt_BR\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\pt_PT\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ro\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ru\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\si\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sk\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sl\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sm\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sq\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sr\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sv\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\sw\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ta\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\te\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\th\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\tr\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\tt\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\ug\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\uk\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\uz\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\vi\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\wa\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\zh_CN\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\zh_TW\readme.txt
C:\Archivos de programa\VideoLAN\VLC\locale\zu\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\*
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\http\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\intf\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\meta\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\modules\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\readme.txt
C:\Archivos de programa\VideoLAN\VLC\lua\sd\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\*
C:\Archivos de programa\VideoLAN\VLC\plugins\access\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\control\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\readme.txt
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\readme.txt
C:\Archivos de programa\VideoLAN\VLC\skins\*
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\*
C:\Program Files\Archivos comunes\microsoft shared\ink\bg-BG\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\cs-CZ\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\da-DK\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\de-DE\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\el-GR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\en-GB\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\es-ES\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\es-MX\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\et-EE\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\fr-CA\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\fr-FR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\fsdefinitions\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\he-IL\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\hr-HR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\hu-HU\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\HWRCustomization\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\it-IT\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\ja-JP\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\ko-KR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\LanguageModel\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\lt-LT\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\lv-LV\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\nb-NO\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\nl-NL\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\pl-PL\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\pt-BR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\pt-PT\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\ro-RO\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\ru-RU\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\sk-SK\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\sl-SI\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\th-TH\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\tr-TR\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\uk-UA\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\zh-CN\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\zh-TW\readme.txt
C:\Archivos de programa\Common Files\System\Ole DB\msdaosp.dll
C:\Archivos de programa\Common Files\System\Ole DB\msdaps.dll
C:\Archivos de programa\Common Files\System\Ole DB\msdasql.dll
C:\Archivos de programa\Common Files\System\Ole DB\msdasqlr.dll
C:\Archivos de programa\Common Files\System\Ole DB\msdatl3.dll
C:\Archivos de programa\Common Files\System\Ole DB\msxactps.dll
C:\Archivos de programa\Common Files\System\Ole DB\oledb32.dll
C:\Archivos de programa\Common Files\System\Ole DB\oledb32r.dll
C:\Archivos de programa\Common Files\System\Ole DB\oledbjvs.inc
C:\Archivos de programa\Common Files\System\Ole DB\oledbvbs.inc
C:\Archivos de programa\Google\Chrome\Application\chrome.VisualElementsManifest.xml
C:\Archivos de programa\Google\Chrome\Application\chrome.VisualElementsManifest.xml.basta
C:\Archivos de programa\Google\Chrome\Application\initial_preferences
C:\Archivos de programa\Google\Chrome\Application\initial_preferences.basta
C:\Archivos de programa\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa
C:\Archivos de programa\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\plugins.dat
C:\Archivos de programa\Google\Chrome\Application\chrome_proxy.exe
C:\Archivos de programa\Google\Chrome\Application\chrome_proxy.exe.basta
C:\Archivos de programa\VideoLAN\VLC\skins\default.vlt
C:\Archivos de programa\VideoLAN\VLC\plugins\plugins.dat.basta
C:\Archivos de programa\VideoLAN\VLC\skins\skin.catalog
C:\Archivos de programa\VideoLAN\VLC\skins\skin.catalog.basta
C:\Archivos de programa\VideoLAN\VLC\skins\skin.dtd
C:\Archivos de programa\VideoLAN\VLC\skins\skin.dtd.basta
C:\Archivos de programa\VideoLAN\VLC\skins\winamp2.xml
C:\Archivos de programa\VideoLAN\VLC\skins\winamp2.xml.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\Alphabet.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\Content.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\hwrcommonlm.dat
C:\Program Files\Archivos comunes\microsoft shared\ink\hwresplm.dat
C:\Program Files\Archivos comunes\microsoft shared\ink\hwrespsh.dat
C:\Program Files\Archivos comunes\microsoft shared\ink\hwrlatinlm.dat
C:\Program Files\Archivos comunes\microsoft shared\ink\InkDiv.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\InkObj.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\InputPersonalization.exe
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsar.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipscat.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipschs.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipscht.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipscsy.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsdan.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsel.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsen.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsesp.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsfin.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsfra.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipshe.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipshi.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipshrv.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsid.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsita.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsjpn.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipskor.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\IpsMigrationPlugin.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsnld.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsnor.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsplk.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\IpsPlugin.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsptb.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsptg.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsrom.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipsrus.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipssrb.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipssrl.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipssve.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\ipstr.xml
C:\Program Files\Archivos comunes\microsoft shared\ink\micaut.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\Microsoft.Ink.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\mip.exe
C:\Program Files\Archivos comunes\microsoft shared\ink\mraut.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\mshwgst.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\mshwLatin.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\rtscom.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\ShapeCollector.exe
C:\Program Files\Archivos comunes\microsoft shared\ink\TabIpsps.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\tabskb.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\TabTip.exe
C:\Program Files\Archivos comunes\microsoft shared\ink\ThirdPartyNotices.MSHWLatin.txt
C:\Program Files\Archivos comunes\microsoft shared\ink\TipRes.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\tipresx.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\tipskins.dll
C:\Program Files\Archivos comunes\microsoft shared\ink\tpcps.dll
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\*
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\en-US\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\es-ES\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\Stationery\*
C:\Program Files\Archivos comunes\microsoft shared\TextConv\*
C:\Program Files\Archivos comunes\microsoft shared\TextConv\en-US\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\Triedit\*
C:\Program Files\Archivos comunes\microsoft shared\Triedit\en-US\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\VGX\*
C:\Program Files\Archivos comunes\System\ado\*
C:\Program Files\Archivos comunes\System\ado\en-US\readme.txt
C:\Program Files\Archivos comunes\System\ado\es-ES\readme.txt
C:\Program Files\Archivos comunes\System\en-US\*
C:\Program Files\Archivos comunes\System\es-ES\*
C:\Program Files\Archivos comunes\System\msadc\*
C:\Program Files\Archivos comunes\System\msadc\en-US\readme.txt
C:\Program Files\Archivos comunes\System\msadc\es-ES\readme.txt
C:\Program Files\Archivos comunes\System\Ole DB\*
C:\Program Files\Archivos comunes\System\Ole DB\en-US\readme.txt
C:\Program Files\Archivos comunes\System\Ole DB\es-ES\readme.txt
C:\Program Files\Archivos comunes\microsoft shared\VGX\VGX.dll
C:\Archivos de programa\VideoLAN\VLC\skins\default.vlt.basta
C:\Program Files\Archivos comunes\System\ado\adojavas.inc
C:\Program Files\Archivos comunes\System\ado\adovbs.inc
C:\Program Files\Archivos comunes\System\ado\msader15.dll
C:\Program Files\Archivos comunes\System\ado\msado15.dll
C:\Program Files\Archivos comunes\System\ado\msado20.tlb
C:\Program Files\Archivos comunes\System\ado\msado21.tlb
C:\Program Files\Archivos comunes\System\ado\msado25.tlb
C:\Program Files\Archivos comunes\System\ado\msado26.tlb
C:\Program Files\Archivos comunes\System\ado\msado27.tlb
C:\Program Files\Archivos comunes\System\ado\msado28.tlb
C:\Program Files\Archivos comunes\System\ado\msado60.tlb
C:\Program Files\Archivos comunes\System\ado\msadomd.dll
C:\Program Files\Archivos comunes\System\ado\msadomd28.tlb
C:\Program Files\Archivos comunes\System\ado\msador15.dll
C:\Program Files\Archivos comunes\System\ado\msador28.tlb
C:\Program Files\Archivos comunes\System\ado\msadox.dll
C:\Program Files\Archivos comunes\System\ado\msadox28.tlb
C:\Program Files\Archivos comunes\System\ado\msadrh15.dll
C:\Program Files\Archivos comunes\System\es-ES\wab32res.dll.mui
C:\Program Files\Archivos comunes\System\msadc\adcjavas.inc
C:\Program Files\Archivos comunes\System\msadc\adcvbs.inc
C:\Program Files\Archivos comunes\System\msadc\msadce.dll
C:\Program Files\Archivos comunes\System\msadc\msadcer.dll
C:\Program Files\Archivos comunes\System\msadc\msadco.dll
C:\Program Files\Archivos comunes\System\msadc\msadcor.dll
C:\Program Files\Archivos comunes\System\msadc\msadds.dll
C:\Program Files\Archivos comunes\System\msadc\msaddsr.dll
C:\Program Files\Archivos comunes\System\msadc\msdaprsr.dll
C:\Program Files\Archivos comunes\System\msadc\msdaprst.dll
C:\Program Files\Archivos comunes\System\msadc\msdarem.dll
C:\Program Files\Archivos comunes\System\msadc\msdaremr.dll
C:\Program Files\Archivos comunes\System\msadc\msdfmap.dll
C:\Program Files\Archivos comunes\System\Ole DB\msdaosp.dll
C:\Program Files\Archivos comunes\System\Ole DB\msdaps.dll
C:\Program Files\Archivos comunes\System\Ole DB\msdasql.dll
C:\Program Files\Archivos comunes\System\Ole DB\msdasqlr.dll
C:\Program Files\Archivos comunes\System\Ole DB\msdatl3.dll
C:\Program Files\Archivos comunes\System\Ole DB\msxactps.dll
C:\Program Files\Archivos comunes\System\Ole DB\oledb32.dll
C:\Program Files\Archivos comunes\System\Ole DB\oledb32r.dll
C:\Program Files\Archivos comunes\System\Ole DB\oledbjvs.inc
C:\Program Files\Archivos comunes\System\Ole DB\oledbvbs.inc
C:\Program Files\Archivos comunes\System\Ole DB\sqloledb.dll
C:\Program Files\Archivos comunes\System\Ole DB\sqloledb.rll
C:\Program Files\Archivos comunes\System\Ole DB\sqlxmlx.dll
C:\Program Files\Archivos comunes\System\Ole DB\sqlxmlx.rll
C:\Program Files\Common Files\microsoft shared\ink\*
C:\Program Files\Common Files\microsoft shared\ink\ar-SA\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml
C:\Program Files\Common Files\microsoft shared\ink\bg-BG\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\da-DK\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\el-GR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\en-US\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\es-ES\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\es-MX\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\et-EE\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\fr-CA\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\hr-HR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\hu-HU\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\it-IT\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\ko-KR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\lt-LT\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\lv-LV\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\nb-NO\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\nl-NL\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\pl-PL\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\pt-BR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\pt-PT\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\ro-RO\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\ru-RU\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\sk-SK\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\sl-SI\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\sv-SE\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\th-TH\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\tr-TR\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\zh-CN\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\zh-TW\readme.txt
C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat
C:\Program Files\Common Files\microsoft shared\ink\hwresplm.dat
C:\Program Files\Common Files\microsoft shared\ink\hwrespsh.dat
C:\Program Files\Common Files\microsoft shared\ink\hwrlatinlm.dat
C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll
C:\Program Files\Common Files\microsoft shared\ink\InkObj.dll
C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml
C:\Program Files\Common Files\microsoft shared\ink\ipscat.xml
C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsen.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsesp.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsfin.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml
C:\Program Files\Common Files\microsoft shared\ink\ipshe.xml
C:\Program Files\Common Files\microsoft shared\ink\ipshi.xml
C:\Program Files\Common Files\microsoft shared\ink\ipshrv.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsid.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsita.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsjpn.xml
C:\Program Files\Common Files\microsoft shared\ink\ipskor.xml
C:\Program Files\Common Files\microsoft shared\ink\IpsMigrationPlugin.dll
C:\Program Files\Common Files\microsoft shared\ink\ipsnld.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsnor.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsplk.xml
C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll
C:\Program Files\Common Files\microsoft shared\ink\ipsptb.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsrom.xml
C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml
C:\Program Files\Common Files\microsoft shared\ink\ipssrl.xml
C:\Program Files\Common Files\microsoft shared\ink\ipssve.xml
C:\Program Files\Common Files\microsoft shared\ink\ipstr.xml
C:\Program Files\Common Files\microsoft shared\ink\micaut.dll
C:\Program Files\Common Files\microsoft shared\ink\mip.exe
C:\Program Files\Common Files\microsoft shared\ink\mraut.dll
C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll
C:\Program Files\Common Files\microsoft shared\ink\mshwLatin.dll
C:\Program Files\Common Files\microsoft shared\ink\rtscom.dll
C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe
C:\Program Files\Common Files\microsoft shared\ink\TabIpsps.dll
C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files\Common Files\microsoft shared\ink\ThirdPartyNotices.MSHWLatin.txt
C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll
C:\Program Files\Common Files\microsoft shared\ink\tipresx.dll
C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll
C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll
C:\Program Files\Common Files\microsoft shared\MSInfo\*
C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\readme.txt
C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\readme.txt
C:\Program Files\Common Files\microsoft shared\Stationery\*
C:\Program Files\Common Files\microsoft shared\TextConv\*
C:\Program Files\Common Files\microsoft shared\TextConv\en-US\readme.txt
C:\Program Files\Common Files\microsoft shared\Triedit\*
C:\Program Files\Common Files\microsoft shared\Triedit\en-US\readme.txt
C:\Program Files\Common Files\microsoft shared\VGX\*
C:\Program Files\Common Files\System\ado\*
C:\Program Files\Common Files\System\ado\en-US\readme.txt
C:\Program Files\Common Files\System\ado\es-ES\readme.txt
C:\Program Files\Common Files\System\en-US\*
C:\Program Files\Common Files\System\es-ES\*
C:\Program Files\Common Files\System\msadc\*
C:\Program Files\Common Files\System\msadc\en-US\readme.txt
C:\Program Files\Common Files\System\msadc\es-ES\readme.txt
C:\Program Files\Common Files\System\Ole DB\*
C:\Program Files\Common Files\System\Ole DB\en-US\readme.txt
C:\Program Files\Common Files\System\Ole DB\es-ES\readme.txt
C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe
C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll
C:\Program Files\Common Files\System\ado\adojavas.inc
C:\Program Files\Common Files\System\ado\adovbs.inc
C:\Program Files\Common Files\System\ado\msader15.dll
C:\Program Files\Common Files\System\ado\msado15.dll
C:\Program Files\Common Files\System\ado\msado20.tlb
C:\Program Files\Common Files\System\ado\msado21.tlb
C:\Program Files\Common Files\System\ado\msado25.tlb
C:\Program Files\Common Files\System\ado\msado26.tlb
C:\Program Files\Common Files\System\ado\msado27.tlb
C:\Program Files\Common Files\System\ado\msado28.tlb
C:\Program Files\Common Files\System\ado\msado60.tlb
C:\Program Files\Common Files\System\ado\msadomd.dll
C:\Program Files\Common Files\System\ado\msadomd28.tlb
C:\Program Files\Common Files\System\ado\msador15.dll
C:\Program Files\Common Files\System\ado\msador28.tlb
C:\Program Files\Common Files\System\ado\msadox.dll
C:\Program Files\Common Files\System\ado\msadox28.tlb
C:\Program Files\Common Files\System\ado\msadrh15.dll
C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui
C:\Program Files\Common Files\System\msadc\adcjavas.inc
C:\Program Files\Common Files\System\msadc\adcvbs.inc
C:\Program Files\Common Files\System\msadc\msadce.dll
C:\Program Files\Common Files\System\msadc\msadcer.dll
C:\Program Files\Common Files\System\msadc\msadco.dll
C:\Program Files\Common Files\System\msadc\msadcor.dll
C:\Program Files\Common Files\System\msadc\msadds.dll
C:\Program Files\Common Files\System\msadc\msaddsr.dll
C:\Program Files\Common Files\System\msadc\msdaprsr.dll
C:\Program Files\Common Files\System\msadc\msdaprst.dll
C:\Program Files\Common Files\System\msadc\msdaremr.dll
C:\Program Files\Common Files\System\msadc\msdfmap.dll
C:\Program Files\Common Files\System\Ole DB\msdaosp.dll
C:\Program Files\Common Files\System\Ole DB\msdaps.dll
C:\Program Files\Common Files\System\Ole DB\msdasql.dll
C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll
C:\Program Files\Common Files\System\Ole DB\msdatl3.dll
C:\Program Files\Common Files\System\Ole DB\msxactps.dll
C:\Program Files\Common Files\System\Ole DB\oledb32.dll
C:\Program Files\Common Files\System\Ole DB\oledb32r.dll
C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc
C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc
C:\Program Files\Common Files\System\Ole DB\sqloledb.dll
C:\Program Files\Common Files\System\Ole DB\sqloledb.rll
C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll
C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
C:\Program Files\Google\Chrome\Application\*
C:\Program Files\Google\Chrome\Application\SetupMetrics\readme.txt
C:\Program Files\Google\Chrome\Temp\*
C:\Program Files\Google\Chrome\Temp\scoped_dir9620_1239862797\readme.txt
C:\Program Files\VideoLAN\VLC\hrtfs\*
C:\Program Files\VideoLAN\VLC\locale\*
C:\Program Files\VideoLAN\VLC\locale\ach\readme.txt
C:\Program Files\VideoLAN\VLC\locale\af\readme.txt
C:\Program Files\VideoLAN\VLC\locale\am\readme.txt
C:\Program Files\VideoLAN\VLC\locale\am_ET\readme.txt
C:\Program Files\VideoLAN\VLC\locale\an\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ar\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ast\readme.txt
C:\Program Files\VideoLAN\VLC\locale\as_IN\readme.txt
C:\Program Files\VideoLAN\VLC\locale\be\readme.txt
C:\Program Files\VideoLAN\VLC\locale\bg\readme.txt
C:\Program Files\VideoLAN\VLC\locale\bn\readme.txt
C:\Program Files\VideoLAN\VLC\locale\bn_IN\readme.txt
C:\Program Files\VideoLAN\VLC\locale\br\readme.txt
C:\Program Files\VideoLAN\VLC\locale\brx\readme.txt
C:\Program Files\VideoLAN\VLC\locale\bs\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ca\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ca@valencia\readme.txt
C:\Program Files\VideoLAN\VLC\locale\cgg\readme.txt
C:\Program Files\VideoLAN\VLC\locale\co\readme.txt
C:\Program Files\VideoLAN\VLC\locale\cs\readme.txt
C:\Program Files\VideoLAN\VLC\locale\cy\readme.txt
C:\Program Files\VideoLAN\VLC\locale\da\readme.txt
C:\Program Files\VideoLAN\VLC\locale\de\readme.txt
C:\Program Files\VideoLAN\VLC\locale\el\readme.txt
C:\Program Files\VideoLAN\VLC\locale\en_GB\readme.txt
C:\Program Files\VideoLAN\VLC\locale\eo\readme.txt
C:\Program Files\VideoLAN\VLC\locale\es\readme.txt
C:\Program Files\VideoLAN\VLC\locale\es_MX\readme.txt
C:\Program Files\VideoLAN\VLC\locale\et\readme.txt
C:\Program Files\VideoLAN\VLC\locale\eu\readme.txt
C:\Program Files\VideoLAN\VLC\locale\fa\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ff\readme.txt
C:\Program Files\VideoLAN\VLC\locale\fi\readme.txt
C:\Program Files\VideoLAN\VLC\locale\fr\readme.txt
C:\Program Files\VideoLAN\VLC\locale\fur\readme.txt
C:\Program Files\VideoLAN\VLC\locale\fy\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ga\readme.txt
C:\Program Files\VideoLAN\VLC\locale\gd\readme.txt
C:\Program Files\VideoLAN\VLC\locale\gl\readme.txt
C:\Program Files\VideoLAN\VLC\locale\gu\readme.txt
C:\Program Files\VideoLAN\VLC\locale\he\readme.txt
C:\Program Files\VideoLAN\VLC\locale\hi\readme.txt
C:\Program Files\VideoLAN\VLC\locale\hr\readme.txt
C:\Program Files\VideoLAN\VLC\locale\hu\readme.txt
C:\Program Files\VideoLAN\VLC\locale\hy\readme.txt
C:\Program Files\VideoLAN\VLC\locale\id\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ie\readme.txt
C:\Program Files\VideoLAN\VLC\locale\is\readme.txt
C:\Program Files\VideoLAN\VLC\locale\it\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ja\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ka\readme.txt
C:\Program Files\VideoLAN\VLC\locale\kab\readme.txt
C:\Program Files\VideoLAN\VLC\locale\kk\readme.txt
C:\Program Files\VideoLAN\VLC\locale\km\readme.txt
C:\Program Files\VideoLAN\VLC\locale\kn\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ko\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ks_IN\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ku_IQ\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ky\readme.txt
C:\Program Files\VideoLAN\VLC\locale\lg\readme.txt
C:\Program Files\VideoLAN\VLC\locale\lo\readme.txt
C:\Program Files\VideoLAN\VLC\locale\lt\readme.txt
C:\Program Files\VideoLAN\VLC\locale\lv\readme.txt
C:\Program Files\VideoLAN\VLC\locale\mai\readme.txt
C:\Program Files\VideoLAN\VLC\locale\mk\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ml\readme.txt
C:\Program Files\VideoLAN\VLC\locale\mn\readme.txt
C:\Program Files\VideoLAN\VLC\locale\mr\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ms\readme.txt
C:\Program Files\VideoLAN\VLC\locale\my\readme.txt
C:\Program Files\VideoLAN\VLC\locale\nb\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ne\readme.txt
C:\Program Files\VideoLAN\VLC\locale\nl\readme.txt
C:\Program Files\VideoLAN\VLC\locale\nn\readme.txt
C:\Program Files\VideoLAN\VLC\locale\oc\readme.txt
C:\Program Files\VideoLAN\VLC\locale\or_IN\readme.txt
C:\Program Files\VideoLAN\VLC\locale\pa\readme.txt
C:\Program Files\VideoLAN\VLC\locale\pl\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ps\readme.txt
C:\Program Files\VideoLAN\VLC\locale\pt_BR\readme.txt
C:\Program Files\VideoLAN\VLC\locale\pt_PT\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ro\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ru\readme.txt
C:\Program Files\VideoLAN\VLC\locale\si\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sk\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sl\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sm\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sq\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sr\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sv\readme.txt
C:\Program Files\VideoLAN\VLC\locale\sw\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ta\readme.txt
C:\Program Files\VideoLAN\VLC\locale\te\readme.txt
C:\Program Files\VideoLAN\VLC\locale\th\readme.txt
C:\Program Files\VideoLAN\VLC\locale\tr\readme.txt
C:\Program Files\VideoLAN\VLC\locale\tt\readme.txt
C:\Program Files\VideoLAN\VLC\locale\ug\readme.txt
C:\Program Files\VideoLAN\VLC\locale\uk\readme.txt
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml.basta
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe.basta
C:\Program Files\Google\Chrome\Application\initial_preferences.basta
C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.basta
C:\Program Files\VideoLAN\VLC\locale\uz\readme.txt
C:\Program Files\VideoLAN\VLC\locale\vi\readme.txt
C:\Program Files\VideoLAN\VLC\locale\wa\readme.txt
C:\Program Files\VideoLAN\VLC\locale\zh_CN\readme.txt
C:\Program Files\VideoLAN\VLC\locale\zh_TW\readme.txt
C:\Program Files\VideoLAN\VLC\locale\zu\readme.txt
C:\Program Files\VideoLAN\VLC\lua\*
C:\Program Files\VideoLAN\VLC\lua\extensions\readme.txt
C:\Program Files\VideoLAN\VLC\lua\http\readme.txt
C:\Program Files\VideoLAN\VLC\lua\intf\readme.txt
C:\Program Files\VideoLAN\VLC\lua\meta\readme.txt
C:\Program Files\VideoLAN\VLC\lua\modules\readme.txt
C:\Program Files\VideoLAN\VLC\lua\playlist\readme.txt
C:\Program Files\VideoLAN\VLC\lua\sd\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\*
C:\Program Files\VideoLAN\VLC\plugins\access\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\access_output\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\audio_filter\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\audio_output\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\codec\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\control\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\d3d11\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\d3d9\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\demux\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\gui\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\keystore\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\logger\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\meta_engine\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\misc\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\mux\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\packetizer\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\services_discovery\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\spu\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\stream_filter\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\stream_out\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\text_renderer\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\video_chroma\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\video_filter\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\video_output\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\video_splitter\readme.txt
C:\Program Files\VideoLAN\VLC\plugins\visualization\readme.txt
C:\Program Files\VideoLAN\VLC\skins\*
C:\Program Files\VideoLAN\VLC\skins\fonts\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\DAO\*
C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\*
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\*
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\readme.txt
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\HWRCustomization\readme.txt
C:\Program Files\VideoLAN\VLC\skins\default.vlt.basta
C:\Program Files\VideoLAN\VLC\skins\skin.catalog.basta
C:\Program Files\VideoLAN\VLC\skins\skin.dtd.basta
C:\Program Files (x86)\Common Files\Microsoft Shared\DAO\dao360.dll
C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\tifffilt.dll
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml
C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\Edge\Application\new_delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_edge_proxy.exe
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_msedge.exe
C:\Program Files (x86)\Microsoft\Edge\Application\new_edge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_pwahelper.exe
C:\Program Files (x86)\Microsoft\Edge\Application\new_pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\126.0.2592.113.manifest
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\126.0.2592.113.manifest.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\concrt140.dll
C:\Users\pacop\Downloads\ChromeSetup.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\d3dcompiler_47.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dual_engine_adapter_x64.dll
C:\FDwSxoT\memory\9812.dmp.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxcompiler.dll
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxil.dll
C:\Program Files (x86)\Microsoft\Edge\Application\new_msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\Edge.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\Edge.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\elevation_service.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\ffmpeg.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\icudtl.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\identity_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\d3dcompiler_47.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\learning_tools.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\ffmpeg.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libEGL.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libGLESv2.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\*
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\BHO\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\copilot_provider_msix\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\EBWebView\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\edge_feedback\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Extensions\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\identity_proxy\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Installer\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Locales\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\MEIPreload\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\PdfPreview\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Trust Protection Lists\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\VisualElements\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\WidevineCdm\readme.txt
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\microsoft_shell_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libEGL.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\microsoft_shell_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mojo_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.dll.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libGLESv2.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\icudtl.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_100_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_200_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_elf.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_100_percent.pak.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_pwa_launcher.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_200_percent.pak.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_wer.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_wer.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mspdf.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxcompiler.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_pwa_launcher.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140_codecvt_ids.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140_codecvt_ids.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140.dll.basta
C:\Users\pacop\Downloads\python-3.10.6.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneds.dll
C:\Users\pacop\Downloads\python-3.10.6-amd64.exe
C:\Users\pacop\Downloads\python-3.10.6-amd64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onnxruntime.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\notification_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\notification_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onramp.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_elf.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\prefs_enclave_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\prefs_enclave_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\pwahelper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onramp.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\resources.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\show_third_party_software_licenses.bat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\show_third_party_software_licenses.bat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\telclient.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneds.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\v8_context_snapshot.bin
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onnxruntime.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vccorlib140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\v8_context_snapshot.bin.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140_1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140_1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vccorlib140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader_icd.json
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader_icd.json.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vulkan-1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\telclient.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wdag.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wdag.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\webview2_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\webview2_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wns_push_client.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vulkan-1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\126.0.2592.87.manifest
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\126.0.2592.87.manifest.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\concrt140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\d3dcompiler_47.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dual_engine_adapter_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wns_push_client.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxcompiler.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneauth.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneauth.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxil.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Edge.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Edge.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\elevation_service.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\ffmpeg.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\icudtl.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\learning_tools.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\identity_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\libEGL.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\libGLESv2.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\microsoft_shell_integration.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\*
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\microsoft_shell_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mojo_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.dll.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mspdf.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.sig
C:\Users\pacop\Downloads\vlc-3.0.21-win64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_100_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_200_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_elf.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_pwa_launcher.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_wer.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_wer.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mspdf.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_pwa_launcher.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140_codecvt_ids.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140_codecvt_ids.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\oneauth.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\oneds.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onnxruntime.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\notification_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\notification_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onramp.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onramp.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\prefs_enclave_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\prefs_enclave_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\pwahelper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\icudtl.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\show_third_party_software_licenses.bat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\show_third_party_software_licenses.bat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vccorlib140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vccorlib140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140_1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140_1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vk_swiftshader.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vk_swiftshader_icd.json
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vk_swiftshader_icd.json.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vulkan-1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wdag.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\webview2_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\webview2_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wns_push_client.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onnxruntime.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\EdgeUpdate.dat
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\EdgeUpdate.dat.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeComRegisterShellARM64.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wdag.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdate.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeComRegisterShellARM64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateBroker.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateBroker.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdate.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateCore.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wns_push_client.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateOnDemand.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateSetup.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateCore.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdate.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_af.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_af.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_am.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_am.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ar.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ar.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_as.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateOnDemand.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_az.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_az.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bg.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bg.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn-IN.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn-IN.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bs.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_as.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca-Es-VALENCIA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca-Es-VALENCIA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bs.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cs.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cy.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cs.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_da.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cy.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_de.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_da.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_el.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_de.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en-GB.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_el.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en-GB.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es-419.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es-419.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_et.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_eu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_et.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fa.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_eu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fa.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fil.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr-CA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr-CA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ga.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ga.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gd.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gd.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_id.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_is.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_id.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_it.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_is.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_iw.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_it.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ja.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_iw.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ka.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ja.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_km.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_km.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ko.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ko.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kok.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kok.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lb.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lb.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lo.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lo.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ka.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lv.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lv.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ml.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ml.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\*
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\*
C:\Program Files (x86)\Microsoft\EdgeUpdate\Offline\*
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\*
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.113\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\SetupMetrics\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\*
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Datos de programa
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Datos de programa\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Documentos
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Documentos\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Escritorio
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Escritorio\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Men\xfa Inicio
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Men\xfa Inicio\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Microsoft\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Microsoft OneDrive\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Package Cache\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Packages\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Plantillas
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\Plantillas\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\regid.1991-06.com.microsoft\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\SoftwareDistribution\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\ssh\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\USOPrivate\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Datos de programa\USOShared\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Documentos\*
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mi m\xfasica
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mi m\xfasica\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mis im\xe1genes
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mis im\xe1genes\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mis v\xeddeos
C:\ProgramData\Datos de programa\Datos de programa\Documentos\Mis v\xeddeos\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ms.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ms.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nb.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ne.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ne.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nb.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_or.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pa.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pa.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_or.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-BR.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-BR.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-PT.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_quz.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-PT.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ro.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_quz.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ru.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ro.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ru.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sq.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-BA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sq.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-RS.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-BA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Latn-RS.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-RS.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sv.dll
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\*
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\*
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\Programas
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxcompiler.dll.basta
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\Programas\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\Programs\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\*
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Crypto\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Device Stage\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\DeviceSync\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Diagnosis\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\DiagnosticLogCSP\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\DRM\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Event Viewer\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\IdentityCRL\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\MapData\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\MF\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\NetFramework\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Network\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Provisioning\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Search\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Settings\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\SmsRouter\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Spectrum\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Speech_OneCore\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sv.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Latn-RS.dll.basta
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Storage Health\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ta.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_te.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_th.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ta.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_te.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_th.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ug.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_uk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ug.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ur.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_vi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_uk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-CN.dll
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\User Account Pictures\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\Vault\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\WDF\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_vi.dll.basta
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\WinMSIPC\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Microsoft\WwanSvc\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-TW.dll
C:\ProgramData\Datos de programa\Datos de programa\Microsoft OneDrive\*
C:\ProgramData\Datos de programa\Datos de programa\Microsoft OneDrive\setup\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Package Cache\*
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\NOTICE.TXT
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-CN.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_64.dll
C:\ProgramData\Datos de programa\Datos de programa\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\*
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\NOTICE.TXT.basta
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-TW.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_arm64.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser.dll
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\readme.txt
C:\ProgramData\Datos de programa\Datos de programa\Plantillas\*
C:\ProgramData\Datos de programa\Datos de programa\regid.1991-06.com.microsoft\*
C:\ProgramData\Datos de programa\Datos de programa\SoftwareDistribution\*
C:\ProgramData\Datos de programa\Datos de programa\ssh\*
C:\ProgramData\Datos de programa\Datos de programa\USOPrivate\*
C:\ProgramData\Datos de programa\Datos de programa\USOShared\*
C:\ProgramData\Datos de programa\Datos de programa\USOShared\Logs\readme.txt
C:\ProgramData\Datos de programa\Documentos\Mi m\xfasica\*
C:\ProgramData\Datos de programa\Documentos\Mis im\xe1genes\*
C:\ProgramData\Datos de programa\Documentos\Mis v\xeddeos\*
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\*
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\7-Zip\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Accessibility\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Accessories\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Administrative Tools\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateSetup.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_arm64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Maintenance\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_arm64.dll
C:\ProgramData\Datos de programa\Datos de programa\Documentos\desktop.ini
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\desktop.ini
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\Google Chrome.lnk.basta
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\Microsoft Edge.lnk.basta
C:\ProgramData\Datos de programa\Datos de programa\Escritorio\VLC media player.lnk.basta
C:\ProgramData\Datos de programa\Datos de programa\Men\xfa Inicio\desktop.ini
C:\ProgramData\Datos de programa\Documentos\Mi m\xfasica\desktop.ini
C:\ProgramData\Datos de programa\Documentos\Mis im\xe1genes\desktop.ini
C:\ProgramData\Datos de programa\Documentos\Mis v\xeddeos\desktop.ini
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\desktop.ini
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Google Chrome.lnk.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Immersive Control Panel.lnk
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\Microsoft Edge.lnk.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\StartUp\readme.txt
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_arm64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\oneauth.dll.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\System Tools\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programas\VideoLAN\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\*
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\7-Zip\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Accessibility\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Accessories\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Administrative Tools\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Maintenance\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\desktop.ini
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Google Chrome.lnk.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Immersive Control Panel.lnk
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\StartUp\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\Microsoft Edge.lnk.basta
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\System Tools\readme.txt
C:\ProgramData\Datos de programa\Men\xfa Inicio\Programs\VideoLAN\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Crypto\*
C:\ProgramData\Datos de programa\Microsoft\Crypto\DSS\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Crypto\Keys\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Crypto\PCPKSP\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Crypto\RSA\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Crypto\SystemKeys\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Device Stage\*
C:\ProgramData\Datos de programa\Microsoft\Device Stage\Task\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DeviceSync\*
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\*
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\AggregatorStorage\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\CustomTraceProfiles\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\DownloadedScenarios\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\DownloadedSettings\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\ETLLogs\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\EventTranscript\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\LocalTraceStore\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\ScenariosSqlStore\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\Sideload\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\EventStore.db
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\EventStore.db-shm
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\EventStore.db-wal
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\osver.txt.basta
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\parse.dat
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\parse.dat.basta
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\Siufloc\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\SoftLanding\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\SoftLandingStage\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\Temp\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\TenantStorage\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Diagnosis\TimeTravelDebuggingStorage\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP\*
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP\Channels\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP\Collectors\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DiagnosticLogCSP\DeviceStateData\readme.txt
C:\ProgramData\Datos de programa\Microsoft\DRM\*
C:\ProgramData\Datos de programa\Microsoft\DRM\Server\readme.txt
C:\ProgramData\Datos de programa\Microsoft\EdgeUpdate\*
C:\ProgramData\Datos de programa\Microsoft\EdgeUpdate\Log\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Event Viewer\*
C:\ProgramData\Datos de programa\Microsoft\Event Viewer\Views\readme.txt
C:\ProgramData\Datos de programa\Microsoft\IdentityCRL\*
C:\ProgramData\Datos de programa\Microsoft\IdentityCRL\INT\readme.txt
C:\ProgramData\Datos de programa\Microsoft\IdentityCRL\production\readme.txt
C:\ProgramData\Datos de programa\Microsoft\MapData\*
C:\ProgramData\Datos de programa\Microsoft\MF\*
C:\ProgramData\Datos de programa\Microsoft\NetFramework\*
C:\ProgramData\Datos de programa\Microsoft\NetFramework\BreadcrumbStore\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Network\*
C:\ProgramData\Datos de programa\Microsoft\Network\Connections\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Network\Downloader\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Provisioning\*
C:\ProgramData\Datos de programa\Microsoft\Provisioning\AssetCache\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Search\*
C:\ProgramData\Datos de programa\Microsoft\Search\Data\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Settings\*
C:\ProgramData\Datos de programa\Microsoft\Settings\Accounts\readme.txt
C:\ProgramData\Datos de programa\Microsoft\SmsRouter\*
C:\ProgramData\Datos de programa\Microsoft\Spectrum\*
C:\ProgramData\Datos de programa\Microsoft\Speech_OneCore\*
C:\ProgramData\Datos de programa\Microsoft\Speech_OneCore\SR\readme.txt
C:\ProgramData\Datos de programa\Microsoft\Storage Health\*
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\*
C:\ProgramData\Datos de programa\Microsoft\Vault\*
C:\ProgramData\Datos de programa\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WDF\*
C:\ProgramData\Datos de programa\Microsoft\WinMSIPC\*
C:\ProgramData\Datos de programa\Microsoft\WinMSIPC\Server\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WwanSvc\*
C:\ProgramData\Datos de programa\Microsoft\WwanSvc\DMProfiles\readme.txt
C:\ProgramData\Datos de programa\Microsoft\WwanSvc\Profiles\readme.txt
C:\ProgramData\Datos de programa\Microsoft OneDrive\setup\*
C:\ProgramData\Datos de programa\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\*
C:\ProgramData\Datos de programa\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Microsoft\MF\Active.GRL.basta
C:\ProgramData\Datos de programa\Microsoft\MF\Pending.GRL.basta
C:\ProgramData\Datos de programa\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.basta
C:\ProgramData\Datos de programa\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG1
C:\ProgramData\Datos de programa\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG2
C:\ProgramData\Datos de programa\Microsoft\Storage Health\StorageHealthModel.dat
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\defaultuser0.dat.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\desktop.ini
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\guest.bmp.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\guest.png.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\pacop.dat.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user-192.png.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user-32.png.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user-40.png.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user-48.png.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user.bmp.basta
C:\ProgramData\Datos de programa\Microsoft\User Account Pictures\user.png.basta
C:\ProgramData\Datos de programa\Microsoft OneDrive\setup\refcount.ini.basta
C:\ProgramData\Datos de programa\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi.basta
C:\ProgramData\Datos de programa\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\*
C:\ProgramData\Datos de programa\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\*
C:\ProgramData\Datos de programa\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\readme.txt
C:\ProgramData\Datos de programa\USOPrivate\UpdateStore\*
C:\ProgramData\Datos de programa\USOShared\Logs\*
C:\ProgramData\Datos de programa\USOShared\Logs\System\readme.txt
C:\ProgramData\Datos de programa\USOShared\Logs\User\readme.txt
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\*
C:\ProgramData\Men\xfa Inicio\Programas\Accessibility\*
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\*
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\*
C:\ProgramData\Men\xfa Inicio\Programas\Maintenance\*
C:\ProgramData\Men\xfa Inicio\Programas\StartUp\*
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\*
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\*
C:\ProgramData\Datos de programa\USOPrivate\UpdateStore\store.db
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip File Manager.lnk
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip Help.lnk
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\resources.pak.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessibility\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\Accessibility\Speech Recognition.lnk
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip File Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Math Input Panel.lnk
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip Help.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Notepad.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Paint.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Quick Assist.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Remote Desktop Connection.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Remote Desktop Connection.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Snipping Tool.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Snipping Tool.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Steps Recorder.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Steps Recorder.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Wordpad.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Component Services.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Computer Management.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Computer Management.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\dfrgui.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\*
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\*
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\dfrgui.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Disk Cleanup.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Disk Cleanup.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Event Viewer.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Component Services.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Wordpad.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Event Viewer.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\iSCSI Initiator.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\iSCSI Initiator.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Quick Assist.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Paint.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Memory Diagnostics Tool.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (32-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (64-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Performance Monitor.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\RecoveryDrive.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Math Input Panel.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\RecoveryDrive.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Registry Editor.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Resource Monitor.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Registry Editor.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\services.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\services.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Configuration.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (32-bit).lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (64-bit).lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Task Scheduler.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Maintenance\Desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\StartUp\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\Task Manager.lnk
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\Task Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\Documentation.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Maintenance\*
C:\ProgramData\Men\xfa Inicio\Programs\StartUp\*
C:\ProgramData\Men\xfa Inicio\Programs\System Tools\*
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\*
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Memory Diagnostics Tool.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Information.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Information.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Performance Monitor.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Configuration.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\Documentation.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\Release Notes.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VideoLAN Website.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VideoLAN Website.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player - reset preferences and cache files.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player skinned.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player.lnk
C:\ProgramData\Microsoft\Crypto\DSS\*
C:\ProgramData\Men\xfa Inicio\Programs\7-Zip\7-Zip File Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\7-Zip\7-Zip Help.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessibility\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\Accessibility\Speech Recognition.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Math Input Panel.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Notepad.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Paint.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Quick Assist.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Remote Desktop Connection.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Snipping Tool.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Steps Recorder.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Accessories\Wordpad.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Component Services.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Computer Management.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\dfrgui.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Disk Cleanup.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Event Viewer.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\iSCSI Initiator.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Performance Monitor.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\RecoveryDrive.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Registry Editor.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\Resource Monitor.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\services.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\System Configuration.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Administrative Tools\System Information.lnk
C:\ProgramData\Men\xfa Inicio\Programs\Maintenance\Desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\StartUp\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\System Tools\desktop.ini
C:\ProgramData\Men\xfa Inicio\Programs\System Tools\Task Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\Documentation.lnk
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\Release Notes.lnk
C:\ProgramData\Microsoft\Crypto\Keys\*
C:\ProgramData\Microsoft\Crypto\PCPKSP\*
C:\ProgramData\Microsoft\Crypto\RSA\*
C:\ProgramData\Microsoft\Crypto\SystemKeys\*
C:\ProgramData\Microsoft\Device Stage\Device\*
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\Release Notes.lnk.basta
C:\ProgramData\Microsoft\Device Stage\Task\*
C:\ProgramData\Microsoft\Diagnosis\AggregatorStorage\*
C:\ProgramData\Microsoft\Diagnosis\CustomTraceProfiles\*
C:\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\*
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\*
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\VideoLAN Website.lnk
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\VLC media player skinned.lnk
C:\ProgramData\Microsoft\Diagnosis\ETLLogs\*
C:\ProgramData\Microsoft\Diagnosis\EventTranscript\*
C:\ProgramData\Microsoft\Diagnosis\FeedbackHub\*
C:\ProgramData\Microsoft\Diagnosis\LocalTraceStore\*
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\*
C:\ProgramData\Microsoft\Diagnosis\Sideload\*
C:\ProgramData\Microsoft\Diagnosis\Siufloc\*
C:\ProgramData\Microsoft\Diagnosis\SoftLanding\*
C:\ProgramData\Microsoft\Diagnosis\SoftLandingStage\*
C:\ProgramData\Microsoft\Diagnosis\Temp\*
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player - reset preferences and cache files.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Task Scheduler.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player skinned.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player.lnk.basta
C:\ProgramData\Microsoft\Diagnosis\TimeTravelDebuggingStorage\*
C:\ProgramData\Microsoft\DiagnosticLogCSP\Channels\*
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\*
C:\ProgramData\Microsoft\DiagnosticLogCSP\DeviceStateData\*
C:\ProgramData\Microsoft\DRM\Server\*
C:\ProgramData\Microsoft\EdgeUpdate\Log\*
C:\ProgramData\Microsoft\Event Viewer\Views\*
C:\ProgramData\Microsoft\IdentityCRL\INT\*
C:\ProgramData\Microsoft\IdentityCRL\production\*
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-7e1cd04ad2694f1d89fd94ad5005a8e2-a696c450-a52d-45b4-844d-bb5b45de5f0c-7607.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-8255342a9a4d4b069b7adbf4798cf544-bf74f026-b3db-4745-a135-a4ad2ba90b51-7489.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\*
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-7e1cd04ad2694f1d89fd94ad5005a8e2-a696c450-a52d-45b4-844d-bb5b45de5f0c-7607.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.aggregators.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.aggregators.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-shm
C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-wal
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_Autopilot_2024_6_19_12_44_57.etl
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.bk.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_6_27_13_7_54.etl
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.bk.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_6_27_9_11_35.etl
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json.basta
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
C:\ProgramData\Microsoft\IdentityCRL\INT\wlidsvcconfig.xml
C:\ProgramData\Microsoft\IdentityCRL\INT\wlidsvcconfig.xml.basta
C:\ProgramData\Microsoft\IdentityCRL\production\wlidsvcconfig.xml
C:\ProgramData\Microsoft\IdentityCRL\production\wlidsvcconfig.xml.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2,1.2.3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2,1.2.3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures,0.2.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures,0.2.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf,3.26.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf,3.26.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack,1.11.59
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack,1.11.59.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3,2.2.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3,2.2.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack,2.6.100-alpha
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack,2.6.100-alpha.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations,2.6.100-alpha
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations,2.6.100-alpha.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder,8.0.0
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_6_27_9_11_35.etl.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions,8.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions,8.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions,8.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions,8.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D,1.1.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D,1.1.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens,7.5.1
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_7_2_11_12_17.etl
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_7_2_11_12_17.etl.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed,1.24032.33
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed,1.24032.33.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard,0.22092.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard,0.22092.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools,17.4.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime,2.3.24
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools,17.4.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime,2.3.24.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications,7.1.3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications,7.1.3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf,1.1.39
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf,1.1.39.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json,13.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json,13.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http,3.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http,3.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy,8.0.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy,8.0.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless,5.15.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless,5.15.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers
C:\ProgramData\Microsoft\Network\Connections\*
C:\ProgramData\Microsoft\Network\Downloader\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common
C:\ProgramData\Microsoft\Provisioning\AssetCache\*
C:\ProgramData\Microsoft\Search\Data\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24051.18
C:\ProgramData\Microsoft\Speech_OneCore\SR\*
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\*
C:\ProgramData\Microsoft\WinMSIPC\Server\*
C:\ProgramData\Microsoft\WwanSvc\DMProfiles\*
C:\ProgramData\Microsoft\WwanSvc\Profiles\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder,8.0.0.basta
C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24061.17.basta
C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding.basta
C:\ProgramData\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24052.12
C:\ProgramData\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\ProgramData\USOShared\Logs\System\*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24061.17.basta
C:\ProgramData\Microsoft\Network\Downloader\edb.chk
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24052.12.basta
C:\ProgramData\Microsoft\Network\Downloader\edb.log
C:\ProgramData\Microsoft\Network\Downloader\edb00005.log
C:\ProgramData\Microsoft\Network\Downloader\edb.chk.basta
C:\ProgramData\Microsoft\Network\Downloader\edbres00001.jrs
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.basta
C:\ProgramData\Microsoft\Network\Downloader\edbres00002.jrs
C:\ProgramData\Microsoft\Network\Downloader\edb00005.log.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mspdf.dll.basta
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\Policy.vpol
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\Policy.vpol.basta
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.0091af12-2035-4696-a6a1-4a40ee2eaabd.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.0888e10a-5c33-4121-a8eb-f2260c2eb2cb.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.1320679c-050c-4adc-b320-4d444df6c782.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.15f90375-f59c-450a-99b2-3aa08f5951cf.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.15f90375-f59c-450a-99b2-3aa08f5951cf.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.15f90375-f59c-450a-99b2-3aa08f5951cf.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.1d376e3a-64db-48a0-8454-48d8756ca19e.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.1d376e3a-64db-48a0-8454-48d8756ca19e.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.26782864-6139-4c42-bac6-24e6f6e78a0d.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.26782864-6139-4c42-bac6-24e6f6e78a0d.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.26782864-6139-4c42-bac6-24e6f6e78a0d.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.2873386c-d74e-4099-84bc-83a88459f87f.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.2d9df2d6-5c38-42ce-93a7-659fcf0eb5d7.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.321333b5-6fdf-455e-9c0e-f2152968da6b.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.3c84e383-dad6-4059-8862-b38ca05b9a04.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.3c84e383-dad6-4059-8862-b38ca05b9a04.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.4.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.5.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.6.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.7.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.8.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.44d2c545-f435-4b9f-a49e-083f51d308c0.9.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.4ac51064-6418-45cc-87be-03affaf21a86.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.4ac51064-6418-45cc-87be-03affaf21a86.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.4.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.5.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.6.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.7.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5295d2c5-b5c8-4d02-86c0-62d07d3b34c2.8.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.548aa5f1-8ac8-4947-aafb-c4cedba8f3db.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.548ca935-7183-45d1-9bb7-e53bf8b2f8b3.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.548ca935-7183-45d1-9bb7-e53bf8b2f8b3.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.548ca935-7183-45d1-9bb7-e53bf8b2f8b3.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5b75c052-f392-4cd9-874d-cf7c9d02732f.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5baff146-e7bd-46a4-9808-a8934207cd76.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5baff146-e7bd-46a4-9808-a8934207cd76.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.5baff146-e7bd-46a4-9808-a8934207cd76.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.70b8c02f-936f-4949-a02f-943f20f80202.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.70b8c02f-936f-4949-a02f-943f20f80202.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.71579edf-1bd5-4dc8-bf89-1effc8cb26ae.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7749a0a4-6700-49d9-921e-a3d842301901.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7749a0a4-6700-49d9-921e-a3d842301901.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7749a0a4-6700-49d9-921e-a3d842301901.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7cf6e69a-d66e-4d33-b7c1-66e8e9ed23a8.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7ef5813e-dfa2-42a0-bbb2-35e7093fe7c2.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.7ef5813e-dfa2-42a0-bbb2-35e7093fe7c2.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.8205e609-2f83-4d3e-8806-99dc5a50281f.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.8205e609-2f83-4d3e-8806-99dc5a50281f.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.8205e609-2f83-4d3e-8806-99dc5a50281f.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.85f5c711-ace0-4046-adbf-e0feeac2d19d.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.85f5c711-ace0-4046-adbf-e0feeac2d19d.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.85f5c711-ace0-4046-adbf-e0feeac2d19d.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.8efced5b-3d69-41f0-ac61-178d1d966151.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.8ffead4a-72c9-4999-a2da-66998abefd8f.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.ad43736c-c023-41ac-9b6d-0205ab70970d.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b0a769f2-c799-4a07-9e27-911c370fe917.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b0a769f2-c799-4a07-9e27-911c370fe917.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b0a769f2-c799-4a07-9e27-911c370fe917.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b15b7541-9d31-4505-9202-fa6ea9e9e835.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b15b7541-9d31-4505-9202-fa6ea9e9e835.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b15b7541-9d31-4505-9202-fa6ea9e9e835.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b36ab36a-20d6-4266-9ad2-756d7661627b.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.4.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.5.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.b58a323c-ff6a-4db2-8299-fa23dab0513d.6.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.bab40cb5-84bb-4bf6-86bc-fe182bd556e1.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.bab40cb5-84bb-4bf6-86bc-fe182bd556e1.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.bab40cb5-84bb-4bf6-86bc-fe182bd556e1.4.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.bc27d732-2069-46ec-aa42-f1c6d425716d.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.c479ea7a-700c-4450-a771-c9db2923d3d0.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.c479ea7a-700c-4450-a771-c9db2923d3d0.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.d09b343c-41b3-40b1-87d4-af40009c4d99.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.d09b343c-41b3-40b1-87d4-af40009c4d99.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.d09b343c-41b3-40b1-87d4-af40009c4d99.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.d317c825-25db-41e0-80ba-6125d7bf3d95.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.dfffe0d6-c614-43ac-8c83-49ea78afdf81.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.dfffe0d6-c614-43ac-8c83-49ea78afdf81.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.dfffe0d6-c614-43ac-8c83-49ea78afdf81.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.dfffe0d6-c614-43ac-8c83-49ea78afdf81.4.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.e042da70-9838-4dda-b2c5-c42acaf4b18d.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.e0ddaacb-062d-4458-ab8e-23e789cba350.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.e0ddaacb-062d-4458-ab8e-23e789cba350.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.e0ddaacb-062d-4458-ab8e-23e789cba350.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.e55b7263-78f2-40d9-878d-2354658a1440.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.eaf69cd7-3bc3-43f7-a3cf-584487d0ad33.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.f18608c2-84a1-491a-b97b-5b08ebb8d170.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.f37284de-4290-41b6-aa30-e856245ec71b.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.f37284de-4290-41b6-aa30-e856245ec71b.2.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.f37284de-4290-41b6-aa30-e856245ec71b.3.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.f8a66c20-564b-46ee-b68d-b3cdd57b6cf9.1.etl
C:\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.fde48030-bd37-45c9-8004-ed9e947499f7.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.015af0c0-a71d-4b32-b205-ab2ec609fadb.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.03b7217c-263d-404e-8246-4f6c14eef46b.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.05efde69-7500-4ac9-8d5c-cc07701155e7.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.0605fe06-55f1-43fb-90f9-cc5857cd5169.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.07dceb52-997e-4a44-9cec-e1647e971bc0.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.09c47048-3148-4672-9693-88726fe78bca.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.103249c7-508a-4913-9d43-bea0f01ef913.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.134a41fe-2bea-4c71-bbf9-2dc26f4a703c.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.16f611ec-4789-4401-9dfd-1d5b902dfeff.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.27496181-3058-4217-9136-d71394caa701.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.34e34605-4bab-498c-b0f3-d83a71ee7e15.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.420a1879-0a81-438e-9c50-050db82b5fb7.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.4312cd54-233a-4a84-a64f-f2b38e9e7889.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.5bc95d78-5ae5-4f39-8933-e1762056de67.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.61432fc2-ab50-4b94-a58d-ad210ac0ffe3.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.6150790d-3364-4c7e-b16a-9de0702e0929.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.62b7dbbe-fe76-47d0-b36d-c06801df43f2.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.6c4ff2d3-349f-4728-a0fd-44a813e8c644.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.71d7a1df-a1f5-4c70-a61e-790a1f534ee3.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.738524c3-b098-487e-883c-0869c6c519ac.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.77515838-76a1-4c57-bf4c-29eb969643a9.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.77ed7dbe-93e2-4a54-839e-5bd7775688d5.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.7f606940-6a4a-4370-a482-ed3950be7aa3.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.8669b97c-1bd4-4f08-8073-db2777809944.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.88a21e3c-ac51-4c70-bd9a-c203789cf45e.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.8adb865d-4444-4663-838e-76a3ac1c3a86.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.8f85f839-dd42-4e91-8fe0-4e9db676b79b.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.9b9955eb-f2c7-497d-bbd6-2ebfee75a2b4.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.a8f5e2d4-24e4-4f69-8f09-bca1689b24b4.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.aa78d38c-b326-41d1-9de7-a040ca0cd700.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.b4cb6798-75e1-4c56-88ac-d9e348dfb793.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.b5af50fd-9d48-400a-9953-53313b443e01.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.b7464604-3103-4bfe-81b5-a5afdaac75fc.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.d33f34b6-5c20-4a79-b3dd-b6e89aa89fa9.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.d9eeca48-f14f-4940-aa4f-18738b0d4f57.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.db7b4143-8751-4cfd-b23d-c612958abeb3.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.e588b7e6-86bc-464e-8876-7dc57a3231ec.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.e9a2a066-484b-47e5-86f5-9fd10c7d044b.1.etl
C:\ProgramData\USOShared\Logs\System\NotificationUxBroker.ea2ae181-120e-499c-8c9c-0a920d3021b6.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.003e3914-c32d-48e9-b861-70f5e27fc02a.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.088cadd5-bc81-46b7-aba7-8b1cecd1cfed.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.0fb4d9b4-c5b2-4e29-b886-5dcbbd5e6ae2.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.13564529-c558-4eeb-9661-028010beda54.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.1feeb832-7eb9-46c8-a545-c7bdb779b8a4.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.34a5b9b7-2eae-4c9d-9bd0-2f8e206f6bdd.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.37cd45c0-3771-4968-ae16-3757f5f8678e.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.3a45e1cf-66c9-49a9-bdce-b41ec4aa1fdc.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.3bef262d-2a14-4259-8e22-78db432f37c7.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.5322f888-c74a-4a89-958c-371f77b1ce1a.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.5411a8a5-0865-46eb-877c-dc00036e8d29.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.5fdcc011-890b-447f-875b-2129509d5061.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.6821a36d-8e10-4342-9c2d-b612eb79b512.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.6d402191-ab83-4811-95bf-a2cf72ab9bfa.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.7aa01dc0-3b8d-4fca-88f9-bea552e21f51.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.97544ff7-8104-4c84-b9c2-af8bbfe577fd.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.993c3bac-c456-410a-8277-772859685e2f.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.a243ed6e-c508-4713-904a-0895af3722a4.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.a512fb6a-2054-4b32-8ab2-d35b2914e7d0.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.a8fe0b23-c9ed-482c-b0e0-10a64dfd5810.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.b3c68d10-3fd9-4629-aefc-fcc0dc474dbf.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.b8e7b55e-19c1-494e-83b0-ff827da6f7d9.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.ba7b49e2-24b8-45f7-8dfe-2c32da52e9e0.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.e5922c09-7a8a-4d43-8b8b-5d9cc32a6031.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.e598adf3-fa41-4837-9a85-ea9f128caa80.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.ebdf7483-3482-416d-80c0-f96bc0173daf.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.eebd1a4f-7f17-4602-9c6a-2eee14d78631.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.eef7d4b9-80f7-4c00-b694-df8753376958.1.etl
C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.ff0d94d8-b60e-4f73-9d00-17c417c39849.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.0f9ef0fa-8b3a-4b83-956a-3f2cc79cc129.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.13922daf-2ac8-4946-9ab1-565c0a91fd00.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.13eb471d-8035-4e48-a780-932cc10db5ac.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.16cf6f4a-cedb-4105-a627-372915a2d78e.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.19df8cdc-d3c7-45e6-83f0-ab3041341235.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.1ab6f018-ec15-40e0-8923-7ba8297f9a81.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.21d7f5eb-7365-45f3-8f63-12d22c2337a2.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.23561fc8-fdd5-429b-a726-210b2c202fbd.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.24072c53-5ff3-4bcd-90b9-37b9394d6a2a.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.2b630b48-8dda-485f-a358-a4d536a1c10c.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.2cbda6c3-8915-4e6d-a7ac-ab733ea0a20a.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.2f5746c7-5912-4c3b-a34e-92b98adb16af.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.30127ac4-8bb8-4909-9a0b-de7f0ea84993.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.3136dfa7-5862-4117-b1f6-22ba3a1e2d33.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.323d8c4e-c49a-4784-8b93-91f127c6362f.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.3306720b-21f2-4870-9a80-048456cc49c7.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.38471a46-8e20-43f4-899a-a9a8601a4477.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.3aac9f5f-bf28-47f2-bb2b-85d0fd024444.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.3f851f93-6645-4687-af56-f0651cd27b18.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.42fb04b1-3909-4c3c-8563-c183bd79e77d.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.468d4d84-42be-4d24-9cf3-d939f67e67e2.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.4827f22b-fe0d-4733-9e17-9f2047705360.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.4efcd54e-307c-4763-9e84-98f257ff2eaa.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.54c273de-d83d-4ac1-94c6-86897b60f238.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.55d5be75-18ec-47ea-984f-3d47d57811e1.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.5b22f3f5-3d3b-4341-bdc8-8db36f8eaf79.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.5b9a25bc-d3fc-4e82-a253-20ccbc39c810.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.602a0afe-b70e-4b3c-b107-1db9ef918a1f.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.6342d75f-a7e4-4b74-ae95-775e1ca2aecb.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.64df4922-dc77-4cb4-8be8-79dc691a7c79.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.665e4a9d-f34f-4a1d-955a-c0a34aa72377.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.666ed82f-62a3-4cec-9bf6-5f14eaa375a1.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.6745ef44-f12c-410c-ab91-14abc2e8ee88.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.6fdae78c-cc81-4c56-a61b-5aa6ddc87472.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.751e2d5a-0530-44c3-bbbe-2e79116036cc.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.7641ec72-e8fa-47ab-b805-328ba1613243.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.764b58df-4859-4154-8996-3571608c78b5.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.77b79af4-2f32-4214-9466-cf29b4f991fb.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.796475c2-226f-43d2-823c-55743a600e8e.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.8061001c-6bd2-4258-abfc-1b1b3dec97d0.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.80eca809-e8e0-4c6f-9e3c-6fe581beb4b2.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.8a84f53b-9b42-4f72-8547-2890d71b4cdd.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.8deaa792-825c-49f6-9b2e-9e420644b7f7.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.97c1412a-0cae-4a46-a17e-c7bd53d3f699.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.98f51357-1b94-4d3b-982d-921a0b4c2c18.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.a1ddd9ca-fa2e-4b14-ab30-881e7163f365.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.ac32ef85-e0c3-41fa-ba1c-a697bf910ab3.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.b10c6505-0b89-4b7e-ae71-ac04a02c6d2c.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.b211e57a-4746-4632-b6c4-fc51c01f1ed0.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.b53b5fcb-6a00-4d46-a53f-81fa19eaccc4.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.bce3f356-07dd-4744-b797-42a081441204.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.be3b87a0-50e4-41d9-af19-8428af93ab37.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.c14ee2e7-bf0a-4517-8ec2-9a31b5315b07.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.c2fcd085-76b4-4140-aa33-a16e222b4ec7.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.c322b609-c26f-43b3-b913-ab54e7c9a9c7.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.c3c18670-e8ff-4bc1-aa02-fc36a45fb3b9.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.d3030b0f-b887-4245-bca3-9bdd0c4678a2.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.dd64a499-5b08-403a-8c0d-3d1622926068.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.df18fcac-8bdb-40bc-ad7d-b9575aa514f5.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.e43c32bf-63ab-463b-be23-aed36108b87a.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.ebce5aba-9319-4df1-9e1c-ce829b8fdefa.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.eceb834b-cc5c-46cd-8d42-c39f7624e69a.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.ee1f9414-8ef7-469d-9999-69de5d6cdf06.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.f0314e90-9d31-409b-a773-d9ce3addba36.1.etl
C:\ProgramData\USOShared\Logs\System\WuProvider.f6443336-25e1-423f-9fe1-88c223da85f8.1.etl
C:\ProgramData\USOShared\Logs\User\*
C:\ProgramData\Microsoft\Network\Downloader\edbres00001.jrs.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.095fa57d-ff28-4ace-b003-d80969b7eaf8.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.095fa57d-ff28-4ace-b003-d80969b7eaf8.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.0e9fd7cc-1a55-4f04-aedb-4729c6d87ad1.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.0e9fd7cc-1a55-4f04-aedb-4729c6d87ad1.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.193aa476-9ca8-4c7f-95f6-587478ce0d4a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.193aa476-9ca8-4c7f-95f6-587478ce0d4a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.1b41d6b3-dbf3-4dcd-b002-70b8233361ed.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1b41d6b3-dbf3-4dcd-b002-70b8233361ed.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.1bd2b8ef-7918-48fc-83c6-1a6ce253c9d9.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1f95d7c6-3855-4363-9f81-d243d8de1f15.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1bd2b8ef-7918-48fc-83c6-1a6ce253c9d9.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2daf42e2-867a-45df-bda7-4ad150d60002.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1f95d7c6-3855-4363-9f81-d243d8de1f15.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2df61257-f2a4-489a-9965-76193a56cb95.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.2daf42e2-867a-45df-bda7-4ad150d60002.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2f99ba07-e9ed-440d-90d8-c1e0edad8d0d.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.2df61257-f2a4-489a-9965-76193a56cb95.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.309119e8-a09e-4616-b8ce-b25153bfbc98.1.etl
C:\tmp228rx8rl\lib\api\__pycache__\*
C:\ProgramData\USOShared\Logs\User\NotificationUx.2f99ba07-e9ed-440d-90d8-c1e0edad8d0d.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.309119e8-a09e-4616-b8ce-b25153bfbc98.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.3c9b29b0-fe64-4f75-b8b9-df5d0e52972a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.4758898c-63ca-4d2c-adcc-ab93ccadd625.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.3c9b29b0-fe64-4f75-b8b9-df5d0e52972a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.4de6b889-5844-4c31-9c0c-c473c3231c19.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.4758898c-63ca-4d2c-adcc-ab93ccadd625.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.554a17c6-e729-497c-95d8-cfe28471a652.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.4de6b889-5844-4c31-9c0c-c473c3231c19.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.5921fa58-3dd4-4e42-94fb-33f9bb9358a8.1.etl
C:\tmp228rx8rl\lib\common\__pycache__\*
C:\ProgramData\USOShared\Logs\User\NotificationUx.554a17c6-e729-497c-95d8-cfe28471a652.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.5921fa58-3dd4-4e42-94fb-33f9bb9358a8.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.726e8be6-2ee1-4513-8f38-cb0be019a0dd.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.72f91d8c-1b7b-4aa3-8405-c757fd6ebcde.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.726e8be6-2ee1-4513-8f38-cb0be019a0dd.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.7e4a35ae-3981-4f2b-8288-ec478737578a.1.etl
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.80bd21cc-05a1-4df5-bbe5-0cee92ed1a45.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.72f91d8c-1b7b-4aa3-8405-c757fd6ebcde.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.820f69ff-91ff-478d-8a93-39274769fe9a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.7e4a35ae-3981-4f2b-8288-ec478737578a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.9a5bb5f1-7806-4244-9ec6-d5eb1e9d5f48.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.80bd21cc-05a1-4df5-bbe5-0cee92ed1a45.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.a09f1e5d-2191-4877-98c3-27d9b5806b57.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.820f69ff-91ff-478d-8a93-39274769fe9a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.a76d7b7f-1ace-4e8d-bc01-2581a469daef.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.9a5bb5f1-7806-4244-9ec6-d5eb1e9d5f48.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.aea00fe8-33dd-4236-bf2a-41c47700fd7c.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.a09f1e5d-2191-4877-98c3-27d9b5806b57.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.b4cd1260-6516-4085-ae08-92b9bfc54534.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.a76d7b7f-1ace-4e8d-bc01-2581a469daef.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.be3ae783-8c8e-44a6-b6d0-1ac13a606b08.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.b4cd1260-6516-4085-ae08-92b9bfc54534.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.c202214f-8e1a-42ee-b597-347a053c7979.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.aea00fe8-33dd-4236-bf2a-41c47700fd7c.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.c3169fb6-fa66-4d96-9300-533aebc9f098.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.be3ae783-8c8e-44a6-b6d0-1ac13a606b08.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.ce575aca-8918-49da-b848-1062455c66bc.1.etl
C:\tmp228rx8rl\lib\core\__pycache__\*
C:\ProgramData\USOShared\Logs\User\NotificationUx.c202214f-8e1a-42ee-b597-347a053c7979.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.d33c7d53-15e4-4f31-9dc2-a5c3af8bb1f7.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.c3169fb6-fa66-4d96-9300-533aebc9f098.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.e3399f10-561c-455b-bd30-a68298638ee5.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.ce575aca-8918-49da-b848-1062455c66bc.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.f1e47454-d7a5-4821-958c-9cff4213b8d5.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.d33c7d53-15e4-4f31-9dc2-a5c3af8bb1f7.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.f3a1f03f-31f9-4590-b6b4-f69d7dd871b5.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.e3399f10-561c-455b-bd30-a68298638ee5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.142f1637-5eb3-4fd5-81c3-cbdeb5f7dd0c.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.f1e47454-d7a5-4821-958c-9cff4213b8d5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.170e4249-3e7a-4b0d-a84b-ec8ab356bddc.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.f3a1f03f-31f9-4590-b6b4-f69d7dd871b5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2191b620-dd88-47c5-8301-5101be60c8a5.1.etl
C:\tmp228rx8rl\modules\auxiliary\__pycache__\*
C:\ProgramData\USOShared\Logs\User\NotifyIcon.142f1637-5eb3-4fd5-81c3-cbdeb5f7dd0c.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.230e5658-e645-4a53-85a3-4638be5cc751.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.170e4249-3e7a-4b0d-a84b-ec8ab356bddc.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2c41f663-ad28-4be7-9824-449179c453de.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.230e5658-e645-4a53-85a3-4638be5cc751.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2da6a411-7ffb-4d06-a653-866903b806a9.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.33cdb750-2f85-4b82-8cad-956b48256087.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.4566d46b-3bf9-4d19-a826-f848c6413e08.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2c41f663-ad28-4be7-9824-449179c453de.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.534961f0-f220-4832-ab76-84c3de1463f0.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.33cdb750-2f85-4b82-8cad-956b48256087.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.5e49103c-4274-48ec-a356-445f69835356.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.4566d46b-3bf9-4d19-a826-f848c6413e08.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.80076f1c-4788-40e7-9eb7-363f101b97c0.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.5e49103c-4274-48ec-a356-445f69835356.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.947a7ed1-5c30-4c88-8634-80550dcf13c1.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.534961f0-f220-4832-ab76-84c3de1463f0.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.9d354caa-5e1a-4227-84e9-f39e652f73fb.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.80076f1c-4788-40e7-9eb7-363f101b97c0.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.c6dba209-1710-4598-b687-e8fa5081de94.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.947a7ed1-5c30-4c88-8634-80550dcf13c1.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.cffac2f9-4b7c-4d48-997d-6910548288a7.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.9d354caa-5e1a-4227-84e9-f39e652f73fb.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.f6ac4910-dfde-4b2e-afad-993bf0473d96.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.c6dba209-1710-4598-b687-e8fa5081de94.1.etl.basta
C:\ProgramData\USOShared\Logs\User\UpdateUx.cc112a0b-857a-4105-a70f-a03e89907d9d.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.f6ac4910-dfde-4b2e-afad-993bf0473d96.1.etl.basta
C:\tmp228rx8rl\lib\api\__pycache__\process.cpython-310.pyc
C:\ProgramData\USOShared\Logs\User\NotifyIcon.cffac2f9-4b7c-4d48-997d-6910548288a7.1.etl.basta
C:\tmp228rx8rl\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp228rx8rl\modules\packages\__pycache__\*
C:\tmp228rx8rl\tests\lib\api\*
C:\tmp228rx8rl\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp228rx8rl\tests\lib\common\*
C:\tmp228rx8rl\tests\modules\packages\*
C:\tmp3bs9izg4\lib\api\__pycache__\*
C:\tmp228rx8rl\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\registry.cpython-310.pyc
C:\ProgramData\USOShared\Logs\User\UpdateUx.cc112a0b-857a-4105-a70f-a03e89907d9d.1.etl.basta
C:\tmp228rx8rl\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\*
C:\tmp228rx8rl\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\*
C:\tmp228rx8rl\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\*
C:\tmp228rx8rl\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\tests\lib\api\test_process.py
C:\tmp228rx8rl\tests\lib\common\test_abstracts.py
C:\tmp228rx8rl\tests\lib\api\test_process.py.basta
C:\tmp228rx8rl\tests\modules\packages\test_ps1.py
C:\tmp228rx8rl\tests\lib\common\test_abstracts.py.basta
C:\tmp3bs9izg4\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp228rx8rl\tests\modules\packages\test_ps1.py.basta
C:\tmp3bs9izg4\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp3bs9izg4\modules\packages\__pycache__\*
C:\tmp3bs9izg4\tests\lib\common\*
C:\tmp3bs9izg4\tests\modules\packages\*
C:\tmp3ljmycja\lib\api\__pycache__\*
C:\tmp3bs9izg4\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\*
C:\tmp3bs9izg4\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\*
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\*
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp3bs9izg4\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp3bs9izg4\tests\lib\api\test_process.py
C:\tmp3bs9izg4\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\tests\lib\common\test_abstracts.py
C:\tmp3bs9izg4\tests\modules\packages\test_ps1.py
C:\tmp3bs9izg4\tests\lib\api\test_process.py.basta
C:\tmp3ljmycja\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp3bs9izg4\tests\lib\common\test_abstracts.py.basta
C:\tmp3ljmycja\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp3bs9izg4\tests\modules\packages\test_ps1.py.basta
C:\tmp3ljmycja\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp3ljmycja\modules\packages\__pycache__\*
C:\tmp3ljmycja\tests\lib\api\*
C:\tmp3ljmycja\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\*
C:\tmp3ljmycja\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\*
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\*
C:\tmp3ljmycja\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp3ljmycja\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp3ljmycja\tests\lib\api\test_process.py
C:\tmp3ljmycja\tests\lib\api\test_process.py.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_Autopilot_2024_6_19_12_44_57.etl.basta
C:\tmp3ljmycja\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\tests\lib\common\test_abstracts.py
C:\tmp3ljmycja\tests\lib\common\test_abstracts.py.basta
C:\tmpb9ol310j\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp3ljmycja\tests\modules\packages\test_ps1.py
C:\tmp3ljmycja\tests\modules\packages\test_ps1.py.basta
C:\tmpb9ol310j\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__pycache__\*
C:\tmpb9ol310j\tests\lib\api\*
C:\tmpb9ol310j\tests\lib\common\*
C:\tmpb9ol310j\tests\modules\packages\*
C:\tmpb9ol310j\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\*
C:\tmpcynaajs6\lib\common\__pycache__\*
C:\tmpb9ol310j\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\*
C:\tmpb9ol310j\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\*
C:\tmpb9ol310j\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpb9ol310j\tests\lib\api\test_process.py
C:\tmpb9ol310j\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\tests\lib\common\test_abstracts.py
C:\tmpb9ol310j\tests\modules\packages\test_ps1.py
C:\tmpb9ol310j\tests\lib\api\test_process.py.basta
C:\tmpb9ol310j\tests\modules\packages\test_ps1.py.basta
C:\tmpcynaajs6\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpb9ol310j\tests\lib\common\test_abstracts.py.basta
C:\tmpcynaajs6\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\packages\__pycache__\*
C:\tmpcynaajs6\tests\lib\api\*
C:\tmpcynaajs6\tests\lib\common\*
C:\tmpcynaajs6\tests\modules\packages\*
C:\tmpd5tr1_rv\lib\api\__pycache__\*
C:\tmpd5tr1_rv\lib\common\__pycache__\*
C:\tmpcynaajs6\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\*
C:\tmpcynaajs6\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\*
C:\tmpcynaajs6\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpcynaajs6\tests\lib\common\test_abstracts.py
C:\tmpcynaajs6\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\tests\modules\packages\test_ps1.py
C:\tmpcynaajs6\tests\lib\api\test_process.py
C:\tmpcynaajs6\tests\lib\api\test_process.py.basta
C:\tmpcynaajs6\tests\modules\packages\test_ps1.py.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpd5tr1_rv\modules\packages\__pycache__\*
C:\tmpd5tr1_rv\tests\lib\api\*
C:\tmpd5tr1_rv\tests\lib\common\*
C:\tmpd5tr1_rv\tests\modules\packages\*
C:\tmpeoix3ml5\lib\api\__pycache__\*
C:\tmpeoix3ml5\lib\common\__pycache__\*
C:\tmpd5tr1_rv\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\*
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\*
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpd5tr1_rv\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\tests\lib\common\test_abstracts.py
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpd5tr1_rv\tests\lib\api\test_process.py
C:\tmpd5tr1_rv\tests\lib\api\test_process.py.basta
C:\tmpeoix3ml5\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__pycache__\*
C:\tmpeoix3ml5\tests\lib\api\*
C:\tmpeoix3ml5\tests\lib\common\*
C:\tmpeoix3ml5\tests\modules\packages\*
C:\tmpeoix3ml5\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\*
C:\tmph_w19omx\lib\common\__pycache__\*
C:\tmpeoix3ml5\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\*
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmph_w19omx\modules\auxiliary\__pycache__\*
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpeoix3ml5\tests\lib\api\test_process.py
C:\tmpeoix3ml5\tests\lib\api\test_process.py.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpeoix3ml5\tests\modules\packages\test_ps1.py
C:\tmpeoix3ml5\tests\modules\packages\test_ps1.py.basta
C:\tmpeoix3ml5\tests\lib\common\test_abstracts.py
C:\tmpeoix3ml5\tests\lib\common\test_abstracts.py.basta
C:\tmph_w19omx\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\common.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\process.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmph_w19omx\modules\packages\__pycache__\*
C:\tmph_w19omx\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmph_w19omx\tests\lib\api\*
C:\tmph_w19omx\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\results.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\config.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\log.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmph_w19omx\tests\modules\packages\*
C:\tmph_w19omx\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpsv59hb03\lib\api\__pycache__\*
C:\tmpsv59hb03\lib\common\__pycache__\*
C:\tmph_w19omx\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\*
C:\tmpyhyv52bd\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\ProgramData\Microsoft\Network\Downloader\edbres00002.jrs.basta
C:\tmpyhyv52bd\lib\core\__pycache__\*
C:\tmpyhyv52bd\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\*
C:\tmpyhyv52bd\modules\packages\__pycache__\*
C:\tmpyhyv52bd\tests\lib\api\*
C:\tmpyhyv52bd\tests\lib\common\*
C:\tmpyhyv52bd\tests\modules\packages\*
C:\tmp_4c73x2e\lib\api\__pycache__\*
C:\tmp_4c73x2e\lib\common\__pycache__\*
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\*
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\*
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpyhyv52bd\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\tests\lib\api\test_process.py
C:\tmpyhyv52bd\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpyhyv52bd\tests\lib\common\test_abstracts.py
C:\tmpyhyv52bd\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\tests\modules\packages\test_ps1.py
C:\tmpyhyv52bd\tests\lib\api\test_process.py.basta
C:\tmp_4c73x2e\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpyhyv52bd\tests\lib\common\test_abstracts.py.basta
C:\tmp_4c73x2e\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp_4c73x2e\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpyhyv52bd\tests\modules\packages\test_ps1.py.basta
C:\tmp_4c73x2e\lib\api\__pycache__\__init__.cpython-310.pyc
C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log
C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log.basta
C:\tmp_4c73x2e\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp_4c73x2e\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp_4c73x2e\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__pycache__\*
C:\tmp_4c73x2e\tests\lib\api\*
C:\tmp_4c73x2e\tests\lib\common\*
C:\tmp_4c73x2e\tests\modules\packages\*
C:\tmp_4c73x2e\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\compound.cpython-310.pyc
C:\Users\All Users\Datos de programa\Men\xfa Inicio\*
C:\tmp_4c73x2e\lib\core\__pycache__\config.cpython-310.pyc
C:\Users\All Users\Datos de programa\Microsoft OneDrive\*
C:\Users\All Users\Datos de programa\Package Cache\*
C:\Users\All Users\Datos de programa\Packages\*
C:\Users\All Users\Datos de programa\Plantillas\*
C:\Users\All Users\Datos de programa\regid.1991-06.com.microsoft\*
C:\tmp_4c73x2e\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\packages.cpython-310.pyc
C:\Users\All Users\Datos de programa\SoftwareDistribution\*
C:\tmp_4c73x2e\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\pipe.cpython-310.pyc
C:\Users\All Users\Datos de programa\ssh\*
C:\Users\All Users\Datos de programa\USOPrivate\*
C:\tmp_4c73x2e\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\Users\All Users\Datos de programa\USOShared\*
C:\tmp_4c73x2e\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\Users\All Users\Microsoft\Crypto\*
C:\Users\All Users\Microsoft\Device Stage\*
C:\Users\All Users\Microsoft\DeviceSync\*
C:\Users\All Users\Microsoft\Diagnosis\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\Users\All Users\Microsoft\DiagnosticLogCSP\*
C:\tmp_4c73x2e\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\Users\All Users\Microsoft\DRM\*
C:\Users\All Users\Microsoft\EdgeUpdate\*
C:\Users\All Users\Microsoft\Event Viewer\*
C:\Users\All Users\Microsoft\IdentityCRL\*
C:\Users\All Users\Microsoft\MapData\*
C:\Users\All Users\Microsoft\MF\*
C:\Users\All Users\Microsoft\NetFramework\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\Users\All Users\Microsoft\Network\*
C:\Users\All Users\Microsoft\Provisioning\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\Users\All Users\Microsoft\Search\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\Users\All Users\Microsoft\Settings\*
C:\Users\All Users\Microsoft\SmsRouter\*
C:\Users\All Users\Microsoft\Spectrum\*
C:\Users\All Users\Microsoft\Speech_OneCore\*
C:\Users\All Users\Microsoft\Storage Health\*
C:\Users\All Users\Microsoft\User Account Pictures\*
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\tests\lib\api\test_process.py
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp_4c73x2e\tests\lib\common\test_abstracts.py
C:\tmp_4c73x2e\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp_4c73x2e\tests\lib\api\test_process.py.basta
C:\tmp_4c73x2e\tests\modules\packages\test_ps1.py
C:\tmp_4c73x2e\tests\lib\common\test_abstracts.py.basta
C:\Users\All Users\Datos de programa\Documentos\desktop.ini
C:\Users\All Users\Datos de programa\Escritorio\desktop.ini
C:\Users\All Users\Datos de programa\Escritorio\Google Chrome.lnk.basta
C:\Users\All Users\Datos de programa\Escritorio\Microsoft Edge.lnk.basta
C:\Users\All Users\Documentos\Mi m\xfasica\desktop.ini
C:\Users\All Users\Documentos\Mis im\xe1genes\desktop.ini
C:\Users\All Users\Documentos\Mis v\xeddeos\desktop.ini
C:\Users\All Users\Men\xfa Inicio\Programas\desktop.ini
C:\Users\All Users\Men\xfa Inicio\Programas\Google Chrome.lnk.basta
C:\tmp_4c73x2e\tests\modules\packages\test_ps1.py.basta
C:\Users\All Users\Men\xfa Inicio\Programas\Immersive Control Panel.lnk
C:\Users\All Users\Men\xfa Inicio\Programs\desktop.ini
C:\Users\All Users\Men\xfa Inicio\Programs\Google Chrome.lnk.basta
C:\Users\All Users\Men\xfa Inicio\Programs\Immersive Control Panel.lnk
C:\Users\All Users\Men\xfa Inicio\Programs\Microsoft Edge.lnk.basta
C:\Users\All Users\Microsoft\Diagnosis\EventStore.db
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\Users\All Users\Microsoft\Diagnosis\EventStore.db-wal
C:\Users\All Users\Microsoft\Diagnosis\osver.txt.basta
C:\Users\All Users\Microsoft\Vault\*
C:\Users\All Users\Microsoft\Diagnosis\parse.dat.basta
C:\Users\All Users\Microsoft\MF\Active.GRL.basta
C:\Users\All Users\Microsoft\MF\Pending.GRL.basta
C:\Users\All Users\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.basta
C:\Users\All Users\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG1
C:\Users\All Users\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.LOG2
C:\Users\All Users\Microsoft\Storage Health\StorageHealthModel.dat
C:\Users\All Users\Microsoft\User Account Pictures\defaultuser0.dat.basta
C:\Users\All Users\Microsoft\User Account Pictures\desktop.ini
C:\Users\All Users\Microsoft\User Account Pictures\guest.bmp.basta
C:\Users\All Users\Microsoft\User Account Pictures\guest.png.basta
C:\Users\All Users\Microsoft\User Account Pictures\pacop.dat.basta
C:\Users\All Users\Microsoft\User Account Pictures\user-192.png.basta
C:\Users\All Users\Microsoft\User Account Pictures\user-32.png.basta
C:\Users\All Users\Microsoft\User Account Pictures\user-40.png.basta
C:\Users\All Users\Microsoft\User Account Pictures\user-48.png.basta
C:\Users\All Users\Microsoft\User Account Pictures\user.bmp.basta
C:\Users\All Users\Microsoft\User Account Pictures\user.png.basta
C:\Users\All Users\Microsoft\WDF\*
C:\Users\All Users\Microsoft\WinMSIPC\*
C:\Users\All Users\Microsoft\WwanSvc\*
C:\Users\All Users\Microsoft OneDrive\setup\*
C:\Users\All Users\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\*
C:\Users\All Users\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.MixedReality.Portal_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\*
C:\Users\All Users\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\*
C:\Users\All Users\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\*
C:\Users\All Users\USOPrivate\UpdateStore\*
C:\Users\All Users\Microsoft OneDrive\setup\refcount.ini.basta
C:\Users\All Users\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi.basta
C:\Users\All Users\USOPrivate\UpdateStore\store.db
C:\Users\All Users\USOShared\Logs\*
C:\Users\Default\AppData\Local\*
C:\Users\Default\AppData\Roaming\*
C:\Users\Default\Configuraci\xf3n local\Archivos temporales de Internet\*
C:\Users\Default\Configuraci\xf3n local\Datos de programa\*
C:\Users\Default\Configuraci\xf3n local\Historial\*
C:\Users\Default\Configuraci\xf3n local\Microsoft\*
C:\Users\Default\Configuraci\xf3n local\Temp\*
C:\Users\Default\Datos de programa\Microsoft\*
C:\Users\Default\Documents\Mi m\xfasica\*
C:\Users\Default\Documents\Mis im\xe1genes\*
C:\Users\Default\Documents\Mis v\xeddeos\*
C:\Users\Default\Men\xfa Inicio\Programas\*
C:\Users\Default\Men\xfa Inicio\Programs\*
C:\Users\Default\Mis documentos\Mi m\xfasica\*
C:\Users\Default\Mis documentos\Mis im\xe1genes\*
C:\Users\Default\Mis documentos\Mis v\xeddeos\*
C:\Users\Default User\AppData\Local\*
C:\Users\Default User\AppData\Roaming\*
C:\Users\Default\Men\xfa Inicio\Programas\desktop.ini
C:\Users\Default\Men\xfa Inicio\Programas\OneDrive.lnk
C:\Users\Default\Men\xfa Inicio\Programas\OneDrive.lnk.basta
C:\Users\Default\Men\xfa Inicio\Programs\desktop.ini
C:\Users\Default\Men\xfa Inicio\Programs\OneDrive.lnk
C:\Users\Default User\Configuraci\xf3n local\Archivos temporales de Internet\*
C:\Users\Default User\Configuraci\xf3n local\Datos de programa\*
C:\Users\Default User\Configuraci\xf3n local\Historial\*
C:\Users\Default User\Configuraci\xf3n local\Microsoft\*
C:\Users\Default User\Configuraci\xf3n local\Temp\*
C:\Users\Default User\Datos de programa\Microsoft\*
C:\Users\Default User\Documents\Mi m\xfasica\*
C:\Users\Default User\Documents\Mis im\xe1genes\*
C:\Users\Default User\Documents\Mis v\xeddeos\*
C:\Users\Default User\Men\xfa Inicio\Programas\*
C:\Users\Default User\Men\xfa Inicio\Programs\*
C:\Users\Default User\Mis documentos\Mi m\xfasica\*
C:\Users\Default User\Mis documentos\Mis im\xe1genes\*
C:\Users\Default User\Mis documentos\Mis v\xeddeos\*
C:\Users\pacop\AppData\Local\*
C:\Users\Default User\Men\xfa Inicio\Programas\desktop.ini
C:\Users\Default User\Men\xfa Inicio\Programas\OneDrive.lnk.basta
C:\Users\Default User\Men\xfa Inicio\Programs\desktop.ini
C:\Users\Default User\Men\xfa Inicio\Programs\OneDrive.lnk.basta
C:\Users\pacop\AppData\Local\IconCache.db.basta
C:\Users\pacop\AppData\LocalLow\*
C:\Users\pacop\AppData\Roaming\*
C:\Users\pacop\Configuraci\xf3n local\Archivos temporales de Internet\*
C:\Users\pacop\Configuraci\xf3n local\Comms\*
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\*
C:\Users\pacop\Configuraci\xf3n local\D3DSCache\*
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\a94bb0b5a18bc1de.cdp
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\a94bb0b5a18bc1de.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdp
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdpresource
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdpresource.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.pacop.cdpresource
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.pacop.cdpresource.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\Datos de programa\*
C:\Users\pacop\Configuraci\xf3n local\Datos de programa\IconCache.db.basta
C:\Users\pacop\Configuraci\xf3n local\Google\*
C:\Users\pacop\Configuraci\xf3n local\Historial\*
C:\Users\pacop\Configuraci\xf3n local\Microsoft\*
C:\Users\pacop\Configuraci\xf3n local\Package Cache\*
C:\Users\pacop\Configuraci\xf3n local\Packages\*
C:\Users\pacop\Configuraci\xf3n local\Historial\desktop.ini
C:\Users\pacop\Configuraci\xf3n local\Historial\desktop.ini.basta
C:\Users\pacop\Configuraci\xf3n local\pip\*
C:\Users\pacop\Configuraci\xf3n local\PlaceholderTileLogoFolder\*
C:\Users\pacop\Configuraci\xf3n local\Programs\*
C:\Users\pacop\Configuraci\xf3n local\Publishers\*
C:\Users\pacop\Configuraci\xf3n local\Temp\*
C:\Users\pacop\Configuraci\xf3n local\VirtualStore\*
C:\Users\pacop\Cookies\DNTException\*
C:\Users\pacop\Cookies\ESE\*
C:\Users\pacop\Cookies\Low\*
C:\Users\pacop\Cookies\PrivacIE\*
C:\Users\pacop\Datos de programa\Adobe\*
C:\Users\pacop\Datos de programa\Microsoft\*
C:\Users\pacop\Configuraci\xf3n local\Temp\.ses
C:\Users\pacop\Configuraci\xf3n local\Temp\.ses.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\9f4c690fdf0c329b419e.exe
C:\Users\pacop\Configuraci\xf3n local\Temp\agenttesla.exe
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F1.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F1.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\BlackBasta_03.exe
C:\Users\pacop\Configuraci\xf3n local\Temp\cv_debug.log
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\cv_debug.log.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct11CD.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct1FA.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct759.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct759.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct8E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct9C31.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct9C32.tmp
C:\Users\pacop\Desktop\cosas\*
C:\Users\pacop\Documents\Mi m\xfasica\*
C:\Users\pacop\Documents\Mis im\xe1genes\*
C:\Users\pacop\Documents\Mis v\xeddeos\*
C:\Users\pacop\Favorites\Links\*
C:\Users\pacop\Configuraci\xf3n local\Temp\wct1FA.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct8E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct9C31.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct11CD.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctD699.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E1.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E1.tmp.basta
C:\Users\pacop\Cookies\ESE\container.dat
C:\Users\pacop\Desktop\cosas\descarga (1).jpg
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E2.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E2.tmp.basta
C:\Users\pacop\Desktop\cosas\descarga.jpg
C:\Users\pacop\Configuraci\xf3n local\Temp\wctDE31.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctDE31.tmp.basta
C:\Users\pacop\Desktop\cosas\images.jpg
C:\Users\pacop\Configuraci\xf3n local\Temp\wctD699.tmp.basta
C:\Users\pacop\Documents\Mi m\xfasica\desktop.ini
C:\Users\pacop\Documents\Mis im\xe1genes\desktop.ini
C:\Users\pacop\Documents\Mis v\xeddeos\desktop.ini
C:\Users\pacop\Favorites\Links\desktop.ini
C:\Users\pacop\Configuraci\xf3n local\Temp\9f4c690fdf0c329b419e.exe.basta
C:\Users\pacop\Desktop\cosas\descarga (1).jpg.basta
C:\Users\pacop\Desktop\cosas\images.jpg.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\agenttesla.exe.basta
C:\Users\pacop\Desktop\cosas\descarga.jpg.basta
C:\Users\pacop\Men\xfa Inicio\Programas\desktop.ini
C:\Users\pacop\Men\xfa Inicio\Programas\OneDrive.lnk
C:\Users\pacop\Men\xfa Inicio\Programs\*
C:\Users\pacop\Men\xfa Inicio\Programas\OneDrive.lnk.basta
C:\Users\pacop\Men\xfa Inicio\Programs\desktop.ini
C:\Users\pacop\Mis documentos\Mi m\xfasica\*
C:\Users\pacop\Mis documentos\Mis im\xe1genes\*
C:\Users\pacop\Mis documentos\Mis v\xeddeos\*
C:\Users\pacop\Pictures\Camera Roll\*
C:\Users\pacop\Pictures\Saved Pictures\*
C:\Users\pacop\Reciente\AutomaticDestinations\*
C:\Users\pacop\Reciente\CustomDestinations\*
C:\Users\pacop\Videos\Captures\*
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\*
C:\Users\Public\Documents\Mi m\xfasica\*
C:\Users\Public\Documents\Mis im\xe1genes\*
C:\Users\Public\Documents\Mis v\xeddeos\*
C:\Users\pacop\Mis documentos\Mi m\xfasica\desktop.ini
C:\Users\pacop\Mis documentos\Mis im\xe1genes\desktop.ini
C:\Users\pacop\Mis documentos\Mis v\xeddeos\desktop.ini
C:\Users\pacop\Pictures\Camera Roll\desktop.ini
C:\Users\pacop\Pictures\Saved Pictures\desktop.ini
C:\Users\pacop\Reciente\AutomaticDestinations\3120801ba34a2faa.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\3120801ba34a2faa.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\40b6c2ffc92fa1cd.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\573770283dc3d854.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\573770283dc3d854.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\590aee7bdd69b59b.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\590aee7bdd69b59b.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\5d696d521de238c3.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\5d696d521de238c3.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\761ad72d4964582f.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\7cb33a580f596f35.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\7cc515ce9647ec58.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ar-SA\*
C:\Users\pacop\Reciente\AutomaticDestinations\da4554e92cc91a44.automaticDestinations-ms
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\bg-BG\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\cs-CZ\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\da-DK\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\de-DE\*
C:\Users\pacop\Reciente\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\7cc515ce9647ec58.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\761ad72d4964582f.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\40b6c2ffc92fa1cd.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\da4554e92cc91a44.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\el-GR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-GB\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-US\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\*
C:\Users\pacop\Reciente\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\f18460fded109990.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\f18460fded109990.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\590aee7bdd69b59b.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\590aee7bdd69b59b.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\5d696d521de238c3.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\7e4dca80246863e3.customDestinations-ms
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-MX\*
C:\Users\pacop\Reciente\CustomDestinations\8e4e81d9adc545b8.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\7e4dca80246863e3.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\f01b4d95cf55d32a.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\f18460fded109990.customDestinations-ms
C:\Users\pacop\Videos\Captures\desktop.ini
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image1080.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image192.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image208.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image240.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image32.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image40.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image424.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image448.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image48.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image64.jpg
C:\Users\Public\AccountPictures\S-1-5-21-3747987639-2506909737-3802746916-1001\{1FEC9E18-3D55-4172-BC78-761051085F63}-Image96.jpg
C:\Users\Public\Documents\Mi m\xfasica\desktop.ini
C:\Users\Public\Documents\Mis im\xe1genes\desktop.ini
C:\Users\Public\Documents\Mis v\xeddeos\desktop.ini
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ar-SA\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\bg-BG\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\cs-CZ\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\da-DK\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\de-DE\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\el-GR\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-GB\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-US\micaut.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-US\mip.exe.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\en-US\tipresx.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\InkObj.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\InputPersonalization.exe.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\mshwLatin.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\rtscom.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\ShapeCollector.exe.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\tabskb.dll.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\TabTip.exe.mui
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\es-ES\TipRes.dll.mui
C:\Users\pacop\Reciente\CustomDestinations\ccba5a5986c77e43.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\f01b4d95cf55d32a.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\8e4e81d9adc545b8.customDestinations-ms.basta
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\et-EE\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fi-FI\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fr-CA\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fr-FR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\fsdefinitions\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\he-IL\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\hr-HR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\hu-HU\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\HWRCustomization\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\it-IT\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ja-JP\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ko-KR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\LanguageModel\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\lt-LT\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\lv-LV\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\nb-NO\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\nl-NL\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pl-PL\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pt-BR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\pt-PT\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ro-RO\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\ru-RU\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sk-SK\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sl-SI\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sr-Latn-RS\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\sv-SE\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\th-TH\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\tr-TR\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\uk-UA\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\zh-CN\*
C:\Archivos de programa\Archivos comunes\microsoft shared\ink\zh-TW\*
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\en-US\*
C:\Archivos de programa\Archivos comunes\microsoft shared\MSInfo\es-ES\*
C:\Archivos de programa\Archivos comunes\microsoft shared\TextConv\en-US\*
C:\Archivos de programa\Archivos comunes\microsoft shared\Triedit\en-US\*
C:\Archivos de programa\Archivos comunes\System\ado\en-US\*
C:\Archivos de programa\Archivos comunes\System\ado\es-ES\*
C:\Archivos de programa\Archivos comunes\System\msadc\en-US\*
C:\Archivos de programa\Archivos comunes\System\msadc\es-ES\*
C:\Archivos de programa\Archivos comunes\System\Ole DB\en-US\*
C:\Archivos de programa\Archivos comunes\System\Ole DB\es-ES\*
C:\Archivos de programa\Common Files\microsoft shared\ink\ar-SA\*
C:\Archivos de programa\Common Files\microsoft shared\ink\bg-BG\*
C:\Archivos de programa\Common Files\microsoft shared\ink\cs-CZ\*
C:\Archivos de programa\Common Files\microsoft shared\ink\da-DK\*
C:\Archivos de programa\Common Files\microsoft shared\ink\de-DE\*
C:\Archivos de programa\Common Files\microsoft shared\ink\el-GR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\en-GB\*
C:\Archivos de programa\Common Files\microsoft shared\ink\en-US\*
C:\Archivos de programa\Common Files\microsoft shared\ink\es-ES\*
C:\Archivos de programa\Common Files\microsoft shared\ink\es-MX\*
C:\Archivos de programa\Common Files\microsoft shared\ink\et-EE\*
C:\Archivos de programa\Common Files\microsoft shared\ink\fi-FI\*
C:\Archivos de programa\Common Files\microsoft shared\ink\fr-CA\*
C:\Archivos de programa\Common Files\microsoft shared\ink\fr-FR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\fsdefinitions\*
C:\Archivos de programa\Common Files\microsoft shared\ink\he-IL\*
C:\Archivos de programa\Common Files\microsoft shared\ink\hr-HR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\hu-HU\*
C:\Archivos de programa\Common Files\microsoft shared\ink\HWRCustomization\*
C:\Archivos de programa\Common Files\microsoft shared\ink\it-IT\*
C:\Archivos de programa\Common Files\microsoft shared\ink\ja-JP\*
C:\Archivos de programa\Common Files\microsoft shared\ink\ko-KR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\LanguageModel\*
C:\Archivos de programa\Common Files\microsoft shared\ink\lt-LT\*
C:\Archivos de programa\Common Files\microsoft shared\ink\lv-LV\*
C:\Archivos de programa\Common Files\microsoft shared\ink\nb-NO\*
C:\Archivos de programa\Common Files\microsoft shared\ink\nl-NL\*
C:\Archivos de programa\Common Files\microsoft shared\ink\pl-PL\*
C:\Archivos de programa\Common Files\microsoft shared\ink\pt-BR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\pt-PT\*
C:\Archivos de programa\Common Files\microsoft shared\ink\ro-RO\*
C:\Archivos de programa\Common Files\microsoft shared\ink\ru-RU\*
C:\Archivos de programa\Common Files\microsoft shared\ink\sk-SK\*
C:\Archivos de programa\Common Files\microsoft shared\ink\sl-SI\*
C:\Archivos de programa\Common Files\microsoft shared\ink\sr-Latn-RS\*
C:\Archivos de programa\Common Files\microsoft shared\ink\sv-SE\*
C:\Archivos de programa\Common Files\microsoft shared\ink\th-TH\*
C:\Archivos de programa\Common Files\microsoft shared\ink\tr-TR\*
C:\Archivos de programa\Common Files\microsoft shared\ink\uk-UA\*
C:\Archivos de programa\Common Files\microsoft shared\ink\zh-CN\*
C:\Archivos de programa\Common Files\microsoft shared\ink\zh-TW\*
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\en-US\*
C:\Archivos de programa\Common Files\microsoft shared\MSInfo\es-ES\*
C:\Archivos de programa\Common Files\microsoft shared\TextConv\en-US\*
C:\Archivos de programa\Common Files\microsoft shared\Triedit\en-US\*
C:\Archivos de programa\Common Files\System\ado\en-US\*
C:\Archivos de programa\Common Files\System\ado\es-ES\*
C:\Archivos de programa\Common Files\System\msadc\en-US\*
C:\Archivos de programa\Common Files\System\msadc\es-ES\*
C:\Archivos de programa\Common Files\System\Ole DB\en-US\*
C:\Archivos de programa\Common Files\System\Ole DB\es-ES\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\*
C:\Archivos de programa\Google\Chrome\Application\SetupMetrics\*
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\*
C:\Archivos de programa\VideoLAN\VLC\locale\ach\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\126.0.6478.185.manifest
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\126.0.6478.185.manifest.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.dll.sig
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.dll.sig.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.exe.sig
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.exe.sig.basta
C:\Archivos de programa\VideoLAN\VLC\locale\af\*
C:\Archivos de programa\VideoLAN\VLC\locale\am\*
C:\Archivos de programa\VideoLAN\VLC\locale\am_ET\*
C:\Archivos de programa\VideoLAN\VLC\locale\an\*
C:\Archivos de programa\VideoLAN\VLC\locale\ar\*
C:\Archivos de programa\VideoLAN\VLC\locale\ast\*
C:\Archivos de programa\VideoLAN\VLC\locale\as_IN\*
C:\Archivos de programa\VideoLAN\VLC\locale\be\*
C:\Archivos de programa\VideoLAN\VLC\locale\bg\*
C:\Archivos de programa\VideoLAN\VLC\locale\bn\*
C:\Archivos de programa\VideoLAN\VLC\locale\bn_IN\*
C:\Archivos de programa\VideoLAN\VLC\locale\br\*
C:\Archivos de programa\VideoLAN\VLC\locale\brx\*
C:\Archivos de programa\VideoLAN\VLC\locale\bs\*
C:\Archivos de programa\VideoLAN\VLC\locale\ca\*
C:\Archivos de programa\VideoLAN\VLC\locale\ca@valencia\*
C:\Archivos de programa\VideoLAN\VLC\locale\cgg\*
C:\Archivos de programa\VideoLAN\VLC\locale\cs\*
C:\Archivos de programa\VideoLAN\VLC\locale\cy\*
C:\Archivos de programa\VideoLAN\VLC\locale\da\*
C:\Archivos de programa\VideoLAN\VLC\locale\de\*
C:\Archivos de programa\VideoLAN\VLC\locale\el\*
C:\Archivos de programa\VideoLAN\VLC\locale\en_GB\*
C:\Archivos de programa\VideoLAN\VLC\locale\eo\*
C:\Archivos de programa\VideoLAN\VLC\locale\es\*
C:\Archivos de programa\VideoLAN\VLC\locale\es_MX\*
C:\Archivos de programa\VideoLAN\VLC\locale\et\*
C:\Archivos de programa\VideoLAN\VLC\locale\eu\*
C:\Archivos de programa\VideoLAN\VLC\locale\fa\*
C:\Archivos de programa\VideoLAN\VLC\locale\ff\*
C:\Archivos de programa\VideoLAN\VLC\locale\fi\*
C:\Archivos de programa\VideoLAN\VLC\locale\fr\*
C:\Archivos de programa\VideoLAN\VLC\locale\fur\*
C:\Archivos de programa\VideoLAN\VLC\locale\fy\*
C:\Archivos de programa\VideoLAN\VLC\locale\ga\*
C:\Archivos de programa\VideoLAN\VLC\locale\gd\*
C:\Archivos de programa\VideoLAN\VLC\locale\gl\*
C:\Archivos de programa\VideoLAN\VLC\locale\gu\*
C:\Archivos de programa\VideoLAN\VLC\locale\he\*
C:\Archivos de programa\VideoLAN\VLC\locale\hi\*
C:\Archivos de programa\VideoLAN\VLC\locale\hr\*
C:\Archivos de programa\VideoLAN\VLC\locale\hu\*
C:\Archivos de programa\VideoLAN\VLC\locale\hy\*
C:\Archivos de programa\VideoLAN\VLC\locale\id\*
C:\Archivos de programa\VideoLAN\VLC\locale\ie\*
C:\Archivos de programa\VideoLAN\VLC\locale\is\*
C:\Archivos de programa\VideoLAN\VLC\locale\it\*
C:\Archivos de programa\VideoLAN\VLC\locale\ja\*
C:\Archivos de programa\VideoLAN\VLC\locale\ka\*
C:\Archivos de programa\VideoLAN\VLC\locale\kab\*
C:\Archivos de programa\VideoLAN\VLC\locale\kk\*
C:\Archivos de programa\VideoLAN\VLC\locale\km\*
C:\Archivos de programa\VideoLAN\VLC\locale\ko\*
C:\Archivos de programa\VideoLAN\VLC\locale\ks_IN\*
C:\Archivos de programa\VideoLAN\VLC\locale\ku_IQ\*
C:\Archivos de programa\VideoLAN\VLC\locale\ky\*
C:\Archivos de programa\VideoLAN\VLC\locale\lg\*
C:\Archivos de programa\VideoLAN\VLC\locale\lo\*
C:\Archivos de programa\VideoLAN\VLC\locale\lt\*
C:\Archivos de programa\VideoLAN\VLC\locale\lv\*
C:\Archivos de programa\VideoLAN\VLC\locale\mai\*
C:\Archivos de programa\VideoLAN\VLC\locale\mk\*
C:\Archivos de programa\VideoLAN\VLC\locale\ml\*
C:\Archivos de programa\VideoLAN\VLC\locale\mn\*
C:\Archivos de programa\VideoLAN\VLC\locale\mr\*
C:\Archivos de programa\VideoLAN\VLC\locale\ms\*
C:\Archivos de programa\VideoLAN\VLC\locale\my\*
C:\Archivos de programa\VideoLAN\VLC\locale\nb\*
C:\Archivos de programa\VideoLAN\VLC\locale\ne\*
C:\Archivos de programa\VideoLAN\VLC\locale\nl\*
C:\Archivos de programa\VideoLAN\VLC\locale\nn\*
C:\Archivos de programa\VideoLAN\VLC\locale\oc\*
C:\Archivos de programa\VideoLAN\VLC\locale\or_IN\*
C:\Archivos de programa\VideoLAN\VLC\locale\pa\*
C:\Archivos de programa\VideoLAN\VLC\locale\pl\*
C:\Archivos de programa\VideoLAN\VLC\locale\ps\*
C:\Archivos de programa\VideoLAN\VLC\locale\pt_BR\*
C:\Archivos de programa\VideoLAN\VLC\locale\pt_PT\*
C:\Archivos de programa\VideoLAN\VLC\locale\ro\*
C:\Archivos de programa\VideoLAN\VLC\locale\ru\*
C:\Archivos de programa\VideoLAN\VLC\locale\si\*
C:\Archivos de programa\VideoLAN\VLC\locale\sk\*
C:\Archivos de programa\VideoLAN\VLC\locale\sl\*
C:\Archivos de programa\VideoLAN\VLC\locale\sm\*
C:\Archivos de programa\VideoLAN\VLC\locale\sq\*
C:\Archivos de programa\VideoLAN\VLC\locale\sr\*
C:\Archivos de programa\VideoLAN\VLC\locale\sv\*
C:\Archivos de programa\VideoLAN\VLC\locale\sw\*
C:\Archivos de programa\VideoLAN\VLC\locale\ta\*
C:\Archivos de programa\VideoLAN\VLC\locale\te\*
C:\Archivos de programa\VideoLAN\VLC\locale\th\*
C:\Archivos de programa\VideoLAN\VLC\locale\tr\*
C:\Archivos de programa\VideoLAN\VLC\locale\tt\*
C:\Archivos de programa\VideoLAN\VLC\locale\ug\*
C:\Archivos de programa\VideoLAN\VLC\locale\uk\*
C:\Archivos de programa\VideoLAN\VLC\locale\uz\*
C:\Archivos de programa\VideoLAN\VLC\locale\vi\*
C:\Archivos de programa\VideoLAN\VLC\locale\zh_CN\*
C:\Archivos de programa\VideoLAN\VLC\locale\zh_TW\*
C:\Archivos de programa\VideoLAN\VLC\locale\zu\*
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\*
C:\Archivos de programa\VideoLAN\VLC\lua\http\*
C:\Archivos de programa\VideoLAN\VLC\lua\intf\*
C:\Archivos de programa\VideoLAN\VLC\lua\meta\*
C:\Archivos de programa\VideoLAN\VLC\lua\modules\*
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_wer.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_wer.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_100_percent.pak
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_100_percent.pak.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_elf.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_elf.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_pwa_launcher.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_pwa_launcher.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_200_percent.pak
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_200_percent.pak.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\eventlog_provider.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\eventlog_provider.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxil.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxil.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\elevation_service.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\elevation_service.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libEGL.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libEGL.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\mojo_core.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\mojo_core.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\d3dcompiler_47.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\d3dcompiler_47.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\notification_helper.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\notification_helper.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libGLESv2.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libGLESv2.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\icudtl.dat
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\icudtl.dat.basta
C:\Archivos de programa\VideoLAN\VLC\lua\sd\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\v8_context_snapshot.bin
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\v8_context_snapshot.bin.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader_icd.json
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader_icd.json.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\*
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\optimization_guide_internal.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\optimization_guide_internal.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vulkan-1.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vulkan-1.dll.basta
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\VLSub.luac
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\VLSub.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\custom.lua
C:\Archivos de programa\VideoLAN\VLC\lua\http\custom.lua.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\favicon.ico
C:\Archivos de programa\VideoLAN\VLC\lua\http\favicon.ico.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\index.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\index.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_browse.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_browse.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_equalizer.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_equalizer.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_view.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_view.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\view.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\view.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm_export.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm_export.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\cli.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\cli.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dummy.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dummy.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dumpmeta.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dumpmeta.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\http.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\http.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\luac.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\luac.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\telnet.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\telnet.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\common.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\common.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\dkjson.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\dkjson.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\sandbox.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\sandbox.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\simplexml.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\simplexml.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_streams.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_streams.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_xml.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_xml.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\appletrailers.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\appletrailers.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\cue.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\cue.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\dailymotion.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\dailymotion.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\jamendo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\jamendo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\koreus.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\koreus.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\liveleak.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\liveleak.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\newgrounds.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\newgrounds.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\soundcloud.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\soundcloud.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\twitch.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\twitch.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vimeo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vimeo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vocaroo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vocaroo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\*
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\youtube.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\youtube.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\sd\icecast.luac
C:\Archivos de programa\VideoLAN\VLC\lua\sd\icecast.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\sd\jamendo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\sd\jamendo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\old_chrome.exe
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\old_chrome.exe.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libattachment_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libattachment_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\resources.pak
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\resources.pak.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libcdda_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdshow_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libftp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libftp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libidummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libimem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libimem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdtv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblive555_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblive555_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libnfs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libnfs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdcp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdcp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsatip_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsatip_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libscreen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsdp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librist_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librist_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\*
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libshm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libshm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsmb_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsmb_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtcp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtcp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libudp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libudp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvcd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librtp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librtp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvdr_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvdr_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\*
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsftp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsftp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_rist_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_rist_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liba52_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvnc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvnc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxcompiler.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxcompiler.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdca_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdca_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaom_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaom_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libg711_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libg711_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\*
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libflac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libkate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\*
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\*
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmft_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmft_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\*
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libopus_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libpng_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libstl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libt140_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libttml_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libttml_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx264_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libgestures_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libntservice_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libasf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libau_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libau_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libavi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libes_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libes_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\*
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\*
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\*
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\*
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\*
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\*
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libimage_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libgme_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmod_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\*
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libogg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libpva_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libreal_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\*
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libtta_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libty_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libty_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libwav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libxa_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx265_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx265_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\*
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\liblua_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libexport_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\*
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\*
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libstats_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\*
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\*
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libxml_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\*
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\*
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\librss_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\librss_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\*
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\ar-SA\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\bg-BG\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\cs-CZ\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\da-DK\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\de-DE\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\el-GR\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\en-GB\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\en-US\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\es-ES\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\es-MX\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\et-EE\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\fi-FI\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\fr-CA\*
C:\Program Files\Archivos comunes\microsoft shared\ink\fr-FR\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\fsdefinitions\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglinterop_dxva2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglinterop_dxva2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\hr-HR\*
C:\Program Files\Archivos comunes\microsoft shared\ink\hu-HU\*
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\HWRCustomization\*
C:\Program Files\Archivos comunes\microsoft shared\ink\it-IT\*
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\ja-JP\*
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\ko-KR\*
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf.basta
C:\Program Files\Archivos comunes\microsoft shared\ink\LanguageModel\*
C:\Program Files\Archivos comunes\microsoft shared\ink\lt-LT\*
C:\Program Files\Archivos comunes\microsoft shared\ink\lv-LV\*
C:\Program Files\Archivos comunes\microsoft shared\ink\nb-NO\*
C:\Program Files\Archivos comunes\microsoft shared\ink\nl-NL\*
C:\Program Files\Archivos comunes\microsoft shared\ink\pl-PL\*
C:\Program Files\Archivos comunes\microsoft shared\ink\pt-BR\*
C:\Program Files\Archivos comunes\microsoft shared\ink\pt-PT\*
C:\Program Files\Archivos comunes\microsoft shared\ink\ro-RO\*
C:\Program Files\Archivos comunes\microsoft shared\ink\ru-RU\*
C:\Program Files\Archivos comunes\microsoft shared\ink\sk-SK\*
C:\Program Files\Archivos comunes\microsoft shared\ink\sl-SI\*
C:\Program Files\Archivos comunes\microsoft shared\ink\sr-Latn-RS\*
C:\Program Files\Archivos comunes\microsoft shared\ink\sv-SE\*
C:\Program Files\Archivos comunes\microsoft shared\ink\th-TH\*
C:\Program Files\Archivos comunes\microsoft shared\ink\tr-TR\*
C:\Program Files\Archivos comunes\microsoft shared\ink\uk-UA\*
C:\Program Files\Archivos comunes\microsoft shared\ink\zh-CN\*
C:\Program Files\Archivos comunes\microsoft shared\ink\zh-TW\*
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\en-US\*
C:\Program Files\Archivos comunes\microsoft shared\MSInfo\es-ES\*
C:\Program Files\Archivos comunes\microsoft shared\TextConv\en-US\*
C:\Program Files\Archivos comunes\microsoft shared\Triedit\en-US\*
C:\Program Files\Archivos comunes\System\ado\en-US\*
C:\Program Files\Archivos comunes\System\ado\es-ES\*
C:\Program Files\Archivos comunes\System\msadc\en-US\*
C:\Program Files\Archivos comunes\System\msadc\es-ES\*
C:\Program Files\Archivos comunes\System\Ole DB\en-US\*
C:\Program Files\Archivos comunes\System\Ole DB\es-ES\*
C:\Program Files\Common Files\microsoft shared\ink\ar-SA\*
C:\Program Files\Common Files\microsoft shared\ink\bg-BG\*
C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\*
C:\Program Files\Common Files\microsoft shared\ink\da-DK\*
C:\Program Files\Common Files\microsoft shared\ink\de-DE\*
C:\Program Files\Common Files\microsoft shared\ink\el-GR\*
C:\Program Files\Common Files\microsoft shared\ink\en-GB\*
C:\Program Files\Common Files\microsoft shared\ink\en-US\*
C:\Program Files\Common Files\microsoft shared\ink\es-ES\*
C:\Program Files\Common Files\microsoft shared\ink\es-MX\*
C:\Program Files\Common Files\microsoft shared\ink\et-EE\*
C:\Program Files\Common Files\microsoft shared\ink\fi-FI\*
C:\Program Files\Common Files\microsoft shared\ink\fr-CA\*
C:\Program Files\Common Files\microsoft shared\ink\fr-FR\*
C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\*
C:\Program Files\Common Files\microsoft shared\ink\he-IL\*
C:\Program Files\Common Files\microsoft shared\ink\hr-HR\*
C:\Program Files\Common Files\microsoft shared\ink\hu-HU\*
C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\*
C:\Program Files\Common Files\microsoft shared\ink\it-IT\*
C:\Program Files\Common Files\microsoft shared\ink\ja-JP\*
C:\Program Files\Common Files\microsoft shared\ink\ko-KR\*
C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\*
C:\Program Files\Common Files\microsoft shared\ink\lt-LT\*
C:\Program Files\Common Files\microsoft shared\ink\lv-LV\*
C:\Program Files\Common Files\microsoft shared\ink\nb-NO\*
C:\Program Files\Common Files\microsoft shared\ink\nl-NL\*
C:\Program Files\Common Files\microsoft shared\ink\pl-PL\*
C:\Program Files\Common Files\microsoft shared\ink\pt-BR\*
C:\Program Files\Common Files\microsoft shared\ink\pt-PT\*
C:\Program Files\Common Files\microsoft shared\ink\ro-RO\*
C:\Program Files\Common Files\microsoft shared\ink\ru-RU\*
C:\Program Files\Common Files\microsoft shared\ink\sk-SK\*
C:\Program Files\Common Files\microsoft shared\ink\sl-SI\*
C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\*
C:\Program Files\Common Files\microsoft shared\ink\sv-SE\*
C:\Program Files\Common Files\microsoft shared\ink\th-TH\*
C:\Program Files\Common Files\microsoft shared\ink\tr-TR\*
C:\Program Files\Common Files\microsoft shared\ink\uk-UA\*
C:\Program Files\Common Files\microsoft shared\ink\zh-CN\*
C:\Program Files\Common Files\microsoft shared\ink\zh-TW\*
C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\*
C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\*
C:\Program Files\Common Files\microsoft shared\TextConv\en-US\*
C:\Program Files\Common Files\microsoft shared\Triedit\en-US\*
C:\Program Files\Common Files\System\ado\en-US\*
C:\Program Files\Common Files\System\ado\es-ES\*
C:\Program Files\Common Files\System\msadc\en-US\*
C:\Program Files\Common Files\System\msadc\es-ES\*
C:\Program Files\Common Files\System\Ole DB\en-US\*
C:\Program Files\Common Files\System\Ole DB\es-ES\*
C:\Program Files\Google\Chrome\Application\126.0.6478.185\*
C:\Program Files\Google\Chrome\Application\SetupMetrics\*
C:\Program Files\Google\Chrome\Temp\scoped_dir9620_1239862797\*
C:\Program Files\VideoLAN\VLC\locale\ach\*
C:\Program Files\VideoLAN\VLC\locale\af\*
C:\Program Files\VideoLAN\VLC\locale\am\*
C:\Program Files\VideoLAN\VLC\locale\am_ET\*
C:\Program Files\VideoLAN\VLC\locale\an\*
C:\Program Files\VideoLAN\VLC\locale\ar\*
C:\Program Files\VideoLAN\VLC\locale\ast\*
C:\Program Files\VideoLAN\VLC\locale\as_IN\*
C:\Program Files\VideoLAN\VLC\locale\be\*
C:\Program Files\VideoLAN\VLC\locale\bg\*
C:\Program Files\VideoLAN\VLC\locale\bn\*
C:\Program Files\VideoLAN\VLC\locale\bn_IN\*
C:\Program Files\VideoLAN\VLC\locale\br\*
C:\Program Files\VideoLAN\VLC\locale\brx\*
C:\Program Files\VideoLAN\VLC\locale\bs\*
C:\Program Files\VideoLAN\VLC\locale\ca\*
C:\Program Files\VideoLAN\VLC\locale\ca@valencia\*
C:\Program Files\VideoLAN\VLC\locale\cgg\*
C:\Program Files\VideoLAN\VLC\locale\co\*
C:\Program Files\VideoLAN\VLC\locale\cs\*
C:\Program Files\VideoLAN\VLC\locale\cy\*
C:\Program Files\VideoLAN\VLC\locale\da\*
C:\Program Files\VideoLAN\VLC\locale\de\*
C:\Program Files\VideoLAN\VLC\locale\el\*
C:\Program Files\VideoLAN\VLC\locale\en_GB\*
C:\Program Files\VideoLAN\VLC\locale\eo\*
C:\Program Files\VideoLAN\VLC\locale\es\*
C:\Program Files\VideoLAN\VLC\locale\es_MX\*
C:\Program Files\VideoLAN\VLC\locale\et\*
C:\Program Files\VideoLAN\VLC\locale\eu\*
C:\Program Files\VideoLAN\VLC\locale\fa\*
C:\Program Files\VideoLAN\VLC\locale\ff\*
C:\Program Files\VideoLAN\VLC\locale\fi\*
C:\Program Files\VideoLAN\VLC\locale\fr\*
C:\Program Files\VideoLAN\VLC\locale\fur\*
C:\Program Files\VideoLAN\VLC\locale\fy\*
C:\Program Files\VideoLAN\VLC\locale\ga\*
C:\Program Files\VideoLAN\VLC\locale\gd\*
C:\Program Files\VideoLAN\VLC\locale\gl\*
C:\Program Files\VideoLAN\VLC\locale\gu\*
C:\Program Files\VideoLAN\VLC\locale\he\*
C:\Program Files\VideoLAN\VLC\locale\hi\*
C:\Program Files\VideoLAN\VLC\locale\hr\*
C:\Program Files\VideoLAN\VLC\locale\hu\*
C:\Program Files\VideoLAN\VLC\locale\hy\*
C:\Program Files\VideoLAN\VLC\locale\id\*
C:\Program Files\VideoLAN\VLC\locale\ie\*
C:\Program Files\VideoLAN\VLC\locale\is\*
C:\Program Files\VideoLAN\VLC\locale\it\*
C:\Program Files\VideoLAN\VLC\locale\ja\*
C:\Program Files\VideoLAN\VLC\locale\ka\*
C:\Program Files\VideoLAN\VLC\locale\kab\*
C:\Program Files\VideoLAN\VLC\locale\kk\*
C:\Program Files\VideoLAN\VLC\locale\km\*
C:\Program Files\VideoLAN\VLC\locale\kn\*
C:\Program Files\VideoLAN\VLC\locale\ko\*
C:\Program Files\VideoLAN\VLC\locale\ks_IN\*
C:\Program Files\VideoLAN\VLC\locale\ku_IQ\*
C:\Program Files\VideoLAN\VLC\locale\ky\*
C:\Program Files\VideoLAN\VLC\locale\lg\*
C:\Program Files\VideoLAN\VLC\locale\lo\*
C:\Program Files\VideoLAN\VLC\locale\lt\*
C:\Program Files\VideoLAN\VLC\locale\lv\*
C:\Program Files\VideoLAN\VLC\locale\mai\*
C:\Program Files\VideoLAN\VLC\locale\mk\*
C:\Program Files\VideoLAN\VLC\locale\ml\*
C:\Program Files\VideoLAN\VLC\locale\mn\*
C:\Program Files\VideoLAN\VLC\locale\mr\*
C:\Program Files\VideoLAN\VLC\locale\ms\*
C:\Program Files\VideoLAN\VLC\locale\my\*
C:\Program Files\VideoLAN\VLC\locale\nb\*
C:\Program Files\VideoLAN\VLC\locale\ne\*
C:\Program Files\VideoLAN\VLC\locale\nl\*
C:\Program Files\VideoLAN\VLC\locale\nn\*
C:\Program Files\VideoLAN\VLC\locale\oc\*
C:\Program Files\VideoLAN\VLC\locale\or_IN\*
C:\Program Files\VideoLAN\VLC\locale\pa\*
C:\Program Files\VideoLAN\VLC\locale\pl\*
C:\Program Files\VideoLAN\VLC\locale\ps\*
C:\Program Files\VideoLAN\VLC\locale\pt_BR\*
C:\Program Files\VideoLAN\VLC\locale\pt_PT\*
C:\Program Files\VideoLAN\VLC\locale\ro\*
C:\Program Files\VideoLAN\VLC\locale\ru\*
C:\Program Files\VideoLAN\VLC\locale\si\*
C:\Program Files\VideoLAN\VLC\locale\sk\*
C:\Program Files\VideoLAN\VLC\locale\sl\*
C:\Program Files\VideoLAN\VLC\locale\sm\*
C:\Program Files\VideoLAN\VLC\locale\sq\*
C:\Program Files\VideoLAN\VLC\locale\sr\*
C:\Program Files\VideoLAN\VLC\locale\sv\*
C:\Program Files\VideoLAN\VLC\locale\sw\*
C:\Program Files\VideoLAN\VLC\locale\ta\*
C:\Program Files\VideoLAN\VLC\locale\te\*
C:\Program Files\VideoLAN\VLC\locale\th\*
C:\Program Files\VideoLAN\VLC\locale\tr\*
C:\Program Files\VideoLAN\VLC\locale\tt\*
C:\Program Files\VideoLAN\VLC\locale\ug\*
C:\Program Files\VideoLAN\VLC\locale\uk\*
C:\Program Files\VideoLAN\VLC\locale\uz\*
C:\Program Files\VideoLAN\VLC\locale\vi\*
C:\Program Files\VideoLAN\VLC\locale\wa\*
C:\Program Files\VideoLAN\VLC\locale\zh_CN\*
C:\Program Files\VideoLAN\VLC\locale\zh_TW\*
C:\Program Files\VideoLAN\VLC\locale\zu\*
C:\Program Files\VideoLAN\VLC\lua\extensions\*
C:\Program Files\VideoLAN\VLC\lua\http\*
C:\Program Files\VideoLAN\VLC\lua\intf\*
C:\Program Files\VideoLAN\VLC\lua\meta\*
C:\Program Files\VideoLAN\VLC\lua\modules\*
C:\Program Files\VideoLAN\VLC\lua\playlist\*
C:\Program Files\VideoLAN\VLC\lua\sd\*
C:\Program Files\VideoLAN\VLC\plugins\access\*
C:\Program Files\VideoLAN\VLC\plugins\access_output\*
C:\Program Files\VideoLAN\VLC\plugins\audio_filter\*
C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\*
C:\Program Files\VideoLAN\VLC\plugins\audio_output\*
C:\Program Files\VideoLAN\VLC\plugins\codec\*
C:\Program Files\VideoLAN\VLC\plugins\control\*
C:\Program Files\VideoLAN\VLC\plugins\d3d11\*
C:\Program Files\VideoLAN\VLC\plugins\d3d9\*
C:\Program Files\VideoLAN\VLC\plugins\demux\*
C:\Program Files\VideoLAN\VLC\plugins\gui\*
C:\Program Files\VideoLAN\VLC\plugins\keystore\*
C:\Program Files\VideoLAN\VLC\plugins\logger\*
C:\Program Files\VideoLAN\VLC\plugins\lua\*
C:\Program Files\VideoLAN\VLC\plugins\meta_engine\*
C:\Program Files\VideoLAN\VLC\plugins\misc\*
C:\Program Files\VideoLAN\VLC\plugins\mux\*
C:\Program Files\VideoLAN\VLC\plugins\packetizer\*
C:\Program Files\VideoLAN\VLC\plugins\services_discovery\*
C:\Program Files\VideoLAN\VLC\plugins\spu\*
C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\*
C:\Program Files\VideoLAN\VLC\plugins\stream_filter\*
C:\Program Files\VideoLAN\VLC\plugins\stream_out\*
C:\Program Files\VideoLAN\VLC\plugins\text_renderer\*
C:\Program Files\VideoLAN\VLC\plugins\video_chroma\*
C:\Program Files\VideoLAN\VLC\plugins\video_filter\*
C:\Program Files\VideoLAN\VLC\plugins\video_output\*
C:\Program Files\VideoLAN\VLC\plugins\video_splitter\*
C:\Program Files\VideoLAN\VLC\plugins\visualization\*
C:\Program Files\VideoLAN\VLC\skins\fonts\*
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\en-US\*
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\*
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\HWRCustomization\*
C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\en-US\*
C:\Program Files (x86)\Common Files\Microsoft Shared\TextConv\en-US\*
C:\Program Files (x86)\Common Files\Microsoft Shared\Triedit\en-US\*
C:\Program Files (x86)\Common Files\System\ado\en-US\*
C:\Program Files (x86)\Common Files\System\ado\es-ES\*
C:\Program Files (x86)\Common Files\System\msadc\en-US\*
C:\Program Files (x86)\Common Files\System\msadc\es-ES\*
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\*
C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\*
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\Crashpad\*
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\*
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\126.0.2592.113.manifest
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\126.0.2592.113.manifest.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\concrt140.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\delegatedWebFeatures.sccd.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dxil.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dxil.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\Edge.dat
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\Edge.dat.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dual_engine_adapter_x64.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\elevation_service.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\d3dcompiler_47.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\d3dcompiler_47.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.manifest
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.manifest.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\ffmpeg.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\ffmpeg.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\learning_tools.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libEGL.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libEGL.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.87\*
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\microsoft_shell_integration.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\microsoft_shell_integration.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libqt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libqt_plugin.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mojo_core.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_core.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.dll.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libGLESv2.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libGLESv2.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge_100_percent.pak
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge_100_percent.pak.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\icudtl.dat
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\icudtl.dat.basta
C:\Users\pacop\AppData\Local\Temp
C:\Users\pacop\AppData\Local
C:\Windows\SysNative\vssadmin.exe
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\KERNELBASE.dll.mui
C:\Windows\System32\vssadmin.exe
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer
C:\Users\Public\Desktop\desktop.ini
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\IconCacheToDelete
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db
::\
::\{F8278C54-A712-415B-B593-B77A2BE0DDA9}
C:\Users\pacop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
C:\Users\pacop\AppData\Roaming
C:\Users\pacop\AppData\Roaming\Microsoft
C:\Users\pacop\AppData\Roaming\Microsoft\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Internet Explorer
C:\Users\pacop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
C:\Users\pacop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk
C:\Users\pacop\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
C:\Users\pacop\AppData\Local\microsoft\Edge\user data\Default\edge profile.ico
C:\Windows\System32\imageres.dll
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\imageres.dll.mui
C:\Windows\System32\es-ES\imageres.dll.mui
C:\Windows\System32\es\imageres.dll.mui
C:\Windows\System32\en-US\imageres.dll.mui
C:\Windows\SystemResources\imageres.dll.mun
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\ThumbCacheToDelete
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard\theme-light
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard\theme-light\
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard\
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\Assets\
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe
C:\Program Files\WindowsApps\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\
C:\Program Files\WindowsApps
C:\Program Files\WindowsApps\
C:\Program Files\
C:
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\images
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\images\
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\
::\{5B934B42-522B-4C34-BBFE-37A3EF7B9C90}
C:\Users\Public\Desktop\Microsoft Edge.lnk
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe.Config
C:\Users\Public\Desktop\Google Chrome.lnk
C:\Users\Public\Desktop\
C:\Users\Public\
C:\Users\
C:\Users\pacop\Desktop\
C:\Users\pacop\
C:\Windows\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Windows\System32\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Windows\System\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Windows\System32\wbem\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Windows\System32\WindowsPowerShell\v1.0\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Windows\System32\OpenSSH\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\Scripts\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Users\pacop\AppData\Local\Programs\Python\Python310-32\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Users\pacop\AppData\Local\Microsoft\WindowsApps\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource:\microsoft.windows.photos\files\assets\photoslogoextensions.png}
C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3747987639-2506909737-3802746916-1001-MergedResources-3.pri
C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosLogoExtensions.targetsize-48.png
C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWS.PHOTOS_2019.19071.12548.0_X64__8WEKYB3D8BBWE\Assets\PHOTOSLOGOEXTENSIONS.TARGETSIZE-48.PNG
C:\Program Files\Google\Chrome\Application\chrome.exe.Config
C:\Users\Public\Desktop\VLC media player.lnk
C:\program files\Google\Chrome\application\chrome.exe
C:\program files (x86)\microsoft\Edge\application\msedge.exe
C:\program files\VideoLAN\VLC\vlc.exe
C:\program files\VideoLAN\SystemResources\vlc.exe.mun
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
\Device\Bam
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1024_768_POS4.jpg
C:\Users\pacop\AppData\Local\Microsoft\PenWorkspace
C:\Users\pacop\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
C:\Users\pacop\Desktop\Google Chrome.lnk
C:\Users\pacop\Desktop\Google Chrome.lnk.basta
C:\Users\Public\Desktop\Google Chrome.lnk.basta
C:\Users\pacop\Desktop\Microsoft Edge.lnk
C:\Users\pacop\Desktop\Microsoft Edge.lnk.basta
C:\Users\Public\Desktop\Microsoft Edge.lnk.basta
C:\Users\pacop\Desktop\VLC media player.lnk
C:\Users\pacop\Desktop\VLC media player.lnk.basta
C:\Users\Public\Desktop\VLC media player.lnk.basta
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\cversions.3.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000035.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x*
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000033.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000034.db
C:\Windows\System32\netprofm.dll
C:\Windows\System32\stdole2.tlb
\Device\RasAcd
C:\Users\pacop\AppData\LocalLow
C:\Users\pacop\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_D53C01423A36DBCEB0BB7256A7DA6D8C
C:\Users\pacop\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Users\pacop\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\pacop\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_D53C01423A36DBCEB0BB7256A7DA6D8C
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WINSPOOL.DRV
C:\Windows\System32\winspool.drv
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
C:\Users\pacop\AppData\Roaming\Microsoft\Windows
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Network Shortcuts
C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk
C:\Windows\System32\Control.VisualElementsManifest.xml
C:\Windows\System32\VisualElementsManifest.xml
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
C:\ProgramData\Microsoft\Windows\Start Menu\
C:\ProgramData\Microsoft\Windows
C:\ProgramData\Microsoft\Windows\
C:\ProgramData\Microsoft\
C:\ProgramData\
C:\ProgramData\Microsoft\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\Speech\SpeechUX\es-ES\sapi.cpl.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\syswow64\es-ES\wmploc.dll.mui
C:\Windows\SysWOW64\es-ES\wmploc.dll.mui
C:\Windows\SysWOW64\es\wmploc.dll.mui
C:\Windows\SysWOW64\en-US\wmploc.dll.mui
C:\Windows\SysWOW64\en\wmploc.dll.mui
C:\Windows\SysWOW64\wmploc.DLL
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk
C:\Windows\System32\mstsc.VisualElementsManifest.xml
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk
C:\Windows\System32\SnippingTool.VisualElementsManifest.xml
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk
C:\Windows\System32\psr.VisualElementsManifest.xml
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk
C:\Windows\System32\WFS.VisualElementsManifest.xml
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\Taskmgr.exe.mui
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk
C:\Windows\System32\taskmgr.VisualElementsManifest.xml
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db
C:\Users\pacop\Desktop\cosas
C:\Users\Public\Desktop\descarga.jpg
C:\DosDevices\pipe\
\??\pipe\MsFteWds
C:\Users\pacop\Desktop\cosas\desktop.ini
C:\Users\pacop\Desktop\cosas\folder.jpg
C:\Users\pacop\Desktop\cosas\folder.gif
C:\Users\pacop\Desktop\cosas\
C:\Windows\System32\SystemResources\imageres.dll.mui.mun
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\netmsg.dll
C:\Windows\netmsg.dll
C:\Windows\System32\netmsg.dll
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\netmsg.dll.mui
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000037.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Program Files\Common Files\Microsoft Shared\Ink\es-ES\mip.exe.mui
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui
C:\Program Files\Common Files\Microsoft Shared\ink\es\mip.exe.mui
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\comres.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\mycomput.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\dfrgui.exe.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\miguiresource.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\AuthFWGP.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\iscsicpl.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\MdSched.exe.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\syswow64\es-ES\odbcint.dll.mui
C:\Windows\SysWOW64\es-ES\odbcint.dll.mui
C:\Windows\SysWOW64\es\odbcint.dll.mui
C:\Windows\SysWOW64\en-US\odbcint.dll.mui
C:\Windows\SysWOW64\en\odbcint.dll.mui
C:\Windows\SysWOW64\odbcint.dll
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\odbcint.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\wdc.dll.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\es-ES\regedit.exe.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\msconfig.exe.mui
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\msinfo32.exe.mui
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000038.db
C:\Users\pacop\AppData\Local\Microsoft\GameDVR\KnownGameList.update
C:\Users\pacop\AppData\Local\Microsoft\GameDVR
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
::\{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0}.VisualElementsManifest.xml
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\Start Menu\
C:\Users\pacop\AppData\Roaming\Microsoft\Windows\
C:\Users\pacop\AppData\Roaming\Microsoft\
C:\Users\pacop\AppData\Roaming\
C:\Users\pacop\AppData\
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000039.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config1.xml
C:\Users\pacop\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config2.xml
\??\PhysicalDrive0
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3747987639-2506909737-3802746916-1001.pckgdep
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\S-1-5-18.pckgdep
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3747987639-2506909737-3802746916-1001.pckgdep
C:\Windows\System32\slui.exe
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\S-1-5-21-3747987639-2506909737-3802746916-1001.pckgdep
C:\Windows\apppatch\sysmain.sdb
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\S-1-5-18.pckgdep
C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4585_none_7e06e2187c9234e2\TiWorker.exe
C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4585_none_21e84694c434c3ac\TiWorker.exe
C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackes-ES_19041.79.266.0_neutral__8wekyb3d8bbwe\Windows\System32\es-ES\combase.dll.mui
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\System32\sxs.dll

Read Files Nothing to display.

Modified Files

C:\604.ini.basta
C:\640.ini.basta
C:\tmp228rx8rl\analysis.conf.basta
C:\tmp228rx8rl\pytest.ini.basta
C:\tmp3bs9izg4\pytest.ini.basta
C:\tmpb9ol310j\pytest.ini.basta
C:\tmp3ljmycja\pytest.ini.basta
C:\tmpcynaajs6\analysis.conf.basta
C:\tmpd5tr1_rv\pytest.ini.basta
C:\tmpeoix3ml5\analysis.conf.basta
C:\tmp228rx8rl\analyzer.py.basta
C:\tmpeoix3ml5\pytest.ini.basta
C:\tmph_w19omx\analysis.conf.basta
C:\tmpb9ol310j\analyzer.py.basta
C:\tmph_w19omx\pytest.ini.basta
C:\tmpsv59hb03\analysis.conf.basta
C:\tmpcynaajs6\analyzer.py.basta
C:\tmpsv59hb03\pytest.ini.basta
C:\tmpugscyilj\analysis.conf.basta
C:\tmph_w19omx\analyzer.py.basta
C:\tmpugscyilj\pytest.ini.basta
C:\tmpxa6n6jlb\analysis.conf.basta
C:\tmpxa6n6jlb\analyzer.py.basta
C:\tmpxa6n6jlb\pytest.ini.basta
C:\tmpyhyv52bd\analysis.conf.basta
C:\tmpyhyv52bd\analyzer.py.basta
C:\Archivos de programa\7-Zip\7-zip.chm.basta
C:\Archivos de programa\7-Zip\7-zip.dll.basta
C:\Archivos de programa\7-Zip\7-zip32.dll.basta
C:\tmpugscyilj\analyzer.py.basta
C:\Archivos de programa\7-Zip\7z.sfx.basta
C:\tmp3ljmycja\analyzer.py.basta
C:\Archivos de programa\7-Zip\7zCon.sfx.basta
C:\Archivos de programa\7-Zip\7z.exe.basta
C:\Archivos de programa\7-Zip\descript.ion.basta
C:\Archivos de programa\7-Zip\History.txt.basta
C:\Archivos de programa\7-Zip\License.txt.basta
C:\Archivos de programa\7-Zip\Uninstall.exe.basta
C:\tmpd5tr1_rv\analyzer.py.basta
C:\Archivos de programa\Microsoft Update Health Tools\expediteupdater.exe.basta
C:\Archivos de programa\7-Zip\7zFM.exe.basta
C:\tmp3bs9izg4\analyzer.py.basta
C:\Archivos de programa\Microsoft Update Health Tools\unifiedinstaller.dll.basta
C:\Archivos de programa\RUXIM\DTUDriver.exe.basta
C:\Archivos de programa\RUXIM\plugscheduler.xml.basta
C:\Archivos de programa\RUXIM\resources.pri.basta
C:\Archivos de programa\7-Zip\7zG.exe.basta
C:\Archivos de programa\Microsoft Update Health Tools\QualityUpdateAssistant.dll.basta
C:\Archivos de programa\RUXIM\RUXIMUXResources.dll.basta
C:\Archivos de programa\Microsoft Update Health Tools\uhssvc.exe.basta
C:\BykZfbvJv\CAPE\5368_1025171522201127462024.basta
C:\BykZfbvJv\CAPE\5368_178396430927462024.basta
C:\BykZfbvJv\CAPE\5368_299646040927462024.basta
C:\BykZfbvJv\CAPE\5368_410803130927462024.basta
C:\Archivos de programa\RUXIM\RUXIMPHDialogHandlers.dll.basta
C:\BykZfbvJv\CAPE\5368_456264422201127462024.basta
C:\BykZfbvJv\CAPE\5368_597069030927462024.basta
C:\BykZfbvJv\tlsdump\tlsdump.log.basta
C:\BykZfbvJv\CAPE\5368_93744519201127462024.basta
C:\FDwSxoT\CAPE\10112_1071445386926362024.basta
C:\FDwSxoT\CAPE\10112_12510038479926362024.basta
C:\Archivos de programa\RUXIM\RUXIMIH.exe.basta
C:\FDwSxoT\CAPE\10112_1498053499926362024.basta
C:\FDwSxoT\CAPE\10112_1548024437261026362024.basta
C:\FDwSxoT\CAPE\10112_1746682549926362024.basta
C:\FDwSxoT\CAPE\10112_188635037261026362024.basta
C:\FDwSxoT\CAPE\10112_20011035386926362024.basta
C:\FDwSxoT\CAPE\10112_218277037261026362024.basta
C:\Archivos de programa\RUXIM\SystemEvaluator.dll.basta
C:\FDwSxoT\CAPE\10112_22398012579926362024.basta
C:\FDwSxoT\CAPE\10112_2855496837261026362024.basta
C:\FDwSxoT\CAPE\10112_4317761559926362024.basta
C:\FDwSxoT\CAPE\10112_4908850396926362024.basta
C:\FDwSxoT\CAPE\10112_508908437261026362024.basta
C:\FDwSxoT\CAPE\10112_588825937261026362024.basta
C:\FDwSxoT\CAPE\10112_8634905386926362024.basta
C:\FDwSxoT\CAPE\9812_13360515256926362024.basta
C:\Archivos de programa\Microsoft Update Health Tools\sedplugins.dll.basta
C:\FDwSxoT\CAPE\10112_710079579926362024.basta
C:\FDwSxoT\CAPE\9812_148050256926362024.basta
C:\FDwSxoT\CAPE\9812_25476220266926362024.basta
C:\FDwSxoT\CAPE\9812_403704038261026362024.basta
C:\FDwSxoT\CAPE\9812_2771352037261026362024.basta
C:\FDwSxoT\CAPE\9812_514455737261026362024.basta
C:\FDwSxoT\CAPE\9812_5610038261026362024.basta
C:\FDwSxoT\CAPE\9812_64116276926362024.basta
C:\FDwSxoT\CAPE\9812_698113637261026362024.basta
C:\FDwSxoT\CAPE\10112_13487084499926362024.basta
C:\Archivos de programa\7-Zip\7z.dll.basta
C:\FDwSxoT\CAPE\9812_702293538261026362024.basta
C:\FDwSxoT\CAPE\9812_804804256926362024.basta
C:\FDwSxoT\CAPE\9812_741427238261026362024.basta
C:\FDwSxoT\CAPE\9812_728209238261026362024.basta
C:\FDwSxoT\CAPE\9812_8924546376926362024.basta
C:\FDwSxoT\CAPE\10112_11462272489926362024.basta
C:\FDwSxoT\CAPE\10112_1545258569926362024.basta
C:\FDwSxoT\CAPE\9812_135927038261026362024.basta
C:\curtain.log.basta
C:\FDwSxoT\tlsdump\tlsdump.log.basta
C:\JeMgNHV\debugger\5156.log.basta
C:\kSSIhSwY\CAPE\4844_1090910516501227462024.basta
C:\kSSIhSwY\CAPE\4844_225977216501227462024.basta
C:\kSSIhSwY\CAPE\4844_59174881650627462024.basta
C:\kSSIhSwY\tlsdump\tlsdump.log.basta
C:\leQWkw\tlsdump\tlsdump.log.basta
C:\pAXehsPqeZ\debugger\7508.log.basta
C:\pAXehsPqeZ\tlsdump\tlsdump.log.basta
C:\ProgramData\Escritorio\Google Chrome.lnk.basta
C:\ProgramData\Escritorio\Microsoft Edge.lnk.basta
C:\ProgramData\Escritorio\VLC media player.lnk.basta
C:\qFosxWEw\CAPE\8312_11630851844827462024.basta
C:\qFosxWEw\CAPE\8312_2108001944827462024.basta
C:\qFosxWEw\CAPE\8312_45528483841827462024.basta
C:\qFosxWEw\CAPE\8312_88614243441827462024.basta
C:\qFosxWEw\CAPE\8312_93814203841827462024.basta
C:\qFosxWEw\CAPE\8312_9493141844827462024.basta
C:\qFosxWEw\tlsdump\tlsdump.log.basta
C:\Recovery\OEM\AfterImageApply_BDB0C1E8-6951-46C4-AB7F-C07B29F462FD.cmd.basta
C:\Recovery\OEM\ResetConfig.xml.basta
C:\sjVjjdVWyc\tlsdump\tlsdump.log.basta
C:\tmp228rx8rl\bin\autoit3.exe.basta
C:\tmp228rx8rl\bin\fZgZRCx.exe.basta
C:\tmp228rx8rl\bin\geckodriver.exe.basta
C:\tmp228rx8rl\bin\loader.exe.basta
C:\tmp228rx8rl\bin\loader_x64.exe.basta
C:\tmp228rx8rl\bin\mNEQAyDN.exe.basta
C:\tmp228rx8rl\bin\PPLinject.exe.basta
C:\tmp228rx8rl\bin\PPLinject64.exe.basta
C:\tmp228rx8rl\bin\Procmon.exe.basta
C:\tmp228rx8rl\bin\procmon.pmc.basta
C:\tmp228rx8rl\bin\psexec.exe.basta
C:\tmp228rx8rl\bin\signtool.exe.basta
C:\tmp228rx8rl\data\msix.ps1.basta
C:\tmp228rx8rl\dll\664.ini.basta
C:\tmp228rx8rl\dll\7728.ini.basta
C:\tmp228rx8rl\dll\8324.ini.basta
C:\tmp228rx8rl\dll\capemon.dll.basta
C:\tmp228rx8rl\dll\capemon_x64.dll.basta
C:\tmp228rx8rl\dll\fwyMDy.dll.basta
C:\tmp228rx8rl\dll\ZHEhBGrl.dll.basta
C:\tmp228rx8rl\lib\__init__.py.basta
C:\tmp228rx8rl\modules\__init__.py.basta
C:\tmp228rx8rl\tests\test_analysis_packages.py.basta
C:\tmp228rx8rl\tests\test_analyzer.py.basta
C:\tmp228rx8rl\tests\test_analyzer_files.py.basta
C:\tmp228rx8rl\tests\test_analyzer_process_list.py.basta
C:\tmp3bs9izg4\bin\autoit3.exe.basta
C:\tmp3bs9izg4\bin\geckodriver.exe.basta
C:\tmp3bs9izg4\bin\iMftAZV.exe.basta
C:\tmp3bs9izg4\bin\KsIgtQTW.exe.basta
C:\tmp3bs9izg4\bin\loader.exe.basta
C:\tmp3bs9izg4\bin\loader_x64.exe.basta
C:\tmp3bs9izg4\bin\PPLinject.exe.basta
C:\tmp3bs9izg4\bin\PPLinject64.exe.basta
C:\tmp3bs9izg4\bin\Procmon.exe.basta
C:\tmp3bs9izg4\bin\procmon.pmc.basta
C:\tmp3bs9izg4\bin\psexec.exe.basta
C:\tmp3bs9izg4\bin\signtool.exe.basta
C:\tmp3bs9izg4\data\msix.ps1.basta
C:\tmp3bs9izg4\dll\10092.ini.basta
C:\tmp3bs9izg4\dll\4908.ini.basta
C:\tmp3bs9izg4\dll\652.ini.basta
C:\tmp3bs9izg4\dll\668.ini.basta
C:\tmp3bs9izg4\dll\6820.ini.basta
C:\tmp3bs9izg4\dll\6912.ini.basta
C:\tmp3bs9izg4\dll\764.ini.basta
C:\tmp3bs9izg4\dll\9172.ini.basta
C:\tmp3bs9izg4\dll\9800.ini.basta
C:\tmp3bs9izg4\dll\9872.ini.basta
C:\FDwSxoT\memory\7488.dmp.basta
C:\FDwSxoT\memory\6688.dmp.basta
C:\tmp3bs9izg4\dll\capemon.dll.basta
C:\tmp3bs9izg4\dll\capemon_x64.dll.basta
C:\tmp3bs9izg4\lib\__init__.py.basta
C:\tmp3bs9izg4\modules\__init__.py.basta
C:\tmp3bs9izg4\tests\test_analysis_packages.py.basta
C:\tmp3bs9izg4\tests\test_analyzer.py.basta
C:\tmp3bs9izg4\tests\test_analyzer_files.py.basta
C:\tmp3bs9izg4\tests\test_analyzer_process_list.py.basta
C:\tmp3bs9izg4\dll\WMpzul.dll.basta
C:\tmp3ljmycja\bin\BxQpoUlU.exe.basta
C:\tmp3ljmycja\bin\autoit3.exe.basta
C:\tmp3bs9izg4\dll\MiOLFfQC.dll.basta
C:\tmp3ljmycja\bin\loader_x64.exe.basta
C:\tmp3ljmycja\bin\loader.exe.basta
C:\tmp3ljmycja\bin\procmon.pmc.basta
C:\tmp3ljmycja\bin\psexec.exe.basta
C:\tmp3ljmycja\bin\signtool.exe.basta
C:\tmp3ljmycja\bin\TJgiMzg.exe.basta
C:\tmp3ljmycja\data\msix.ps1.basta
C:\tmp3ljmycja\dll\676.ini.basta
C:\tmp3ljmycja\bin\geckodriver.exe.basta
C:\tmp3ljmycja\dll\AtzxdgLn.dll.basta
C:\FDwSxoT\memory\10112.dmp.basta
C:\FDwSxoT\memory\4840.dmp.basta
C:\tmp3ljmycja\lib\__init__.py.basta
C:\tmp3ljmycja\modules\__init__.py.basta
C:\tmp3ljmycja\tests\test_analysis_packages.py.basta
C:\tmp3ljmycja\tests\test_analyzer.py.basta
C:\tmp3ljmycja\tests\test_analyzer_files.py.basta
C:\tmp3ljmycja\tests\test_analyzer_process_list.py.basta
C:\tmpb9ol310j\bin\aFbdvLL.exe.basta
C:\FDwSxoT\memory\3748.dmp.basta
C:\tmp3ljmycja\bin\Procmon.exe.basta
C:\tmpb9ol310j\bin\loader.exe.basta
C:\tmpb9ol310j\bin\autoit3.exe.basta
C:\tmpb9ol310j\bin\PPLinject.exe.basta
C:\tmp3ljmycja\dll\capemon.dll.basta
C:\tmpb9ol310j\bin\loader_x64.exe.basta
C:\tmpb9ol310j\bin\procmon.pmc.basta
C:\tmpb9ol310j\bin\PPLinject64.exe.basta
C:\tmpb9ol310j\bin\psexec.exe.basta
C:\tmpb9ol310j\bin\signtool.exe.basta
C:\tmpb9ol310j\data\msix.ps1.basta
C:\tmpb9ol310j\dll\5108.ini.basta
C:\tmpb9ol310j\dll\5436.ini.basta
C:\tmpb9ol310j\dll\672.ini.basta
C:\tmpb9ol310j\dll\784.ini.basta
C:\tmpb9ol310j\dll\8104.ini.basta
C:\tmpb9ol310j\bin\UJuBcdJT.exe.basta
C:\tmp3ljmycja\dll\capemon_x64.dll.basta
C:\tmp3ljmycja\dll\zIMuwGE.dll.basta
C:\tmpb9ol310j\bin\geckodriver.exe.basta
C:\tmpb9ol310j\lib\__init__.py.basta
C:\tmpb9ol310j\modules\__init__.py.basta
C:\tmpb9ol310j\tests\test_analysis_packages.py.basta
C:\tmpb9ol310j\tests\test_analyzer.py.basta
C:\tmpb9ol310j\dll\aGuqCwX.dll.basta
C:\tmpb9ol310j\tests\test_analyzer_process_list.py.basta
C:\tmpb9ol310j\tests\test_analyzer_files.py.basta
C:\tmpb9ol310j\dll\capemon.dll.basta
C:\tmpcynaajs6\bin\gpwkXsgs.exe.basta
C:\tmpcynaajs6\bin\IWzvSnF.exe.basta
C:\tmpcynaajs6\bin\loader.exe.basta
C:\tmpcynaajs6\bin\autoit3.exe.basta
C:\tmpcynaajs6\bin\loader_x64.exe.basta
C:\tmpcynaajs6\bin\PPLinject.exe.basta
C:\tmpcynaajs6\bin\PPLinject64.exe.basta
C:\tmpcynaajs6\bin\procmon.pmc.basta
C:\tmpcynaajs6\bin\psexec.exe.basta
C:\tmpcynaajs6\bin\signtool.exe.basta
C:\tmpcynaajs6\data\msix.ps1.basta
C:\tmpcynaajs6\dll\5368.ini.basta
C:\tmpcynaajs6\dll\676.ini.basta
C:\tmpcynaajs6\dll\7564.ini.basta
C:\tmpb9ol310j\dll\capemon_x64.dll.basta
C:\tmpb9ol310j\bin\Procmon.exe.basta
C:\tmpb9ol310j\dll\oPPvjQM.dll.basta
C:\tmpcynaajs6\bin\geckodriver.exe.basta
C:\tmpcynaajs6\lib\__init__.py.basta
C:\tmpcynaajs6\modules\__init__.py.basta
C:\tmpcynaajs6\tests\test_analysis_packages.py.basta
C:\tmpcynaajs6\tests\test_analyzer.py.basta
C:\tmpcynaajs6\tests\test_analyzer_files.py.basta
C:\tmpcynaajs6\tests\test_analyzer_process_list.py.basta
C:\tmpcynaajs6\dll\AnoOgbz.dll.basta
C:\tmpd5tr1_rv\bin\AJPJZeI.exe.basta
C:\tmpcynaajs6\dll\capemon.dll.basta
C:\tmpd5tr1_rv\bin\autoit3.exe.basta
C:\tmpd5tr1_rv\bin\loader.exe.basta
C:\tmpd5tr1_rv\bin\loader_x64.exe.basta
C:\tmpd5tr1_rv\bin\PPLinject.exe.basta
C:\tmpd5tr1_rv\bin\OYBVajFt.exe.basta
C:\tmpd5tr1_rv\bin\PPLinject64.exe.basta
C:\tmpd5tr1_rv\bin\procmon.pmc.basta
C:\tmpd5tr1_rv\bin\psexec.exe.basta
C:\tmpcynaajs6\dll\capemon_x64.dll.basta
C:\tmpd5tr1_rv\data\msix.ps1.basta
C:\tmpd5tr1_rv\dll\672.ini.basta
C:\tmpcynaajs6\dll\ohiagkD.dll.basta
C:\tmpd5tr1_rv\dll\7652.ini.basta
C:\tmpd5tr1_rv\bin\signtool.exe.basta
C:\tmpcynaajs6\bin\Procmon.exe.basta
C:\tmpd5tr1_rv\bin\geckodriver.exe.basta
C:\tmpd5tr1_rv\lib\__init__.py.basta
C:\tmpd5tr1_rv\modules\__init__.py.basta
C:\tmpd5tr1_rv\tests\test_analysis_packages.py.basta
C:\tmpd5tr1_rv\tests\test_analyzer.py.basta
C:\tmpd5tr1_rv\tests\test_analyzer_files.py.basta
C:\tmpd5tr1_rv\tests\test_analyzer_process_list.py.basta
C:\tmpd5tr1_rv\dll\capemon.dll.basta
C:\tmpd5tr1_rv\dll\biRxxbp.dll.basta
C:\tmpeoix3ml5\bin\autoit3.exe.basta
C:\tmpeoix3ml5\bin\loader.exe.basta
C:\tmpeoix3ml5\bin\lHYlaISZ.exe.basta
C:\tmpeoix3ml5\bin\PPLinject.exe.basta
C:\tmpeoix3ml5\bin\loader_x64.exe.basta
C:\tmpeoix3ml5\bin\PPLinject64.exe.basta
C:\tmpeoix3ml5\bin\procmon.pmc.basta
C:\tmpeoix3ml5\bin\psexec.exe.basta
C:\tmpeoix3ml5\bin\signtool.exe.basta
C:\tmpeoix3ml5\bin\Zhuvduq.exe.basta
C:\tmpeoix3ml5\data\msix.ps1.basta
C:\tmpeoix3ml5\dll\4844.ini.basta
C:\tmpeoix3ml5\dll\672.ini.basta
C:\tmpd5tr1_rv\dll\yARuoZGp.dll.basta
C:\tmpd5tr1_rv\dll\capemon_x64.dll.basta
C:\tmpd5tr1_rv\bin\Procmon.exe.basta
C:\tmpeoix3ml5\bin\geckodriver.exe.basta
C:\tmpeoix3ml5\lib\__init__.py.basta
C:\tmpeoix3ml5\modules\__init__.py.basta
C:\tmpeoix3ml5\tests\test_analysis_packages.py.basta
C:\tmpeoix3ml5\tests\test_analyzer.py.basta
C:\tmpeoix3ml5\tests\test_analyzer_files.py.basta
C:\tmpeoix3ml5\tests\test_analyzer_process_list.py.basta
C:\tmpeoix3ml5\dll\capemon.dll.basta
C:\tmpeoix3ml5\dll\jIXOyf.dll.basta
C:\tmph_w19omx\bin\loader.exe.basta
C:\tmph_w19omx\bin\loader_x64.exe.basta
C:\tmph_w19omx\bin\autoit3.exe.basta
C:\tmph_w19omx\bin\PPLinject.exe.basta
C:\tmph_w19omx\bin\PPLinject64.exe.basta
C:\tmph_w19omx\bin\procmon.pmc.basta
C:\tmph_w19omx\bin\psexec.exe.basta
C:\tmpeoix3ml5\dll\capemon_x64.dll.basta
C:\tmph_w19omx\bin\signtool.exe.basta
C:\tmph_w19omx\bin\VSLgQYHf.exe.basta
C:\tmph_w19omx\data\msix.ps1.basta
C:\tmph_w19omx\dll\10048.ini.basta
C:\tmph_w19omx\dll\10112.ini.basta
C:\tmph_w19omx\dll\10136.ini.basta
C:\tmph_w19omx\dll\10196.ini.basta
C:\tmph_w19omx\dll\2848.ini.basta
C:\tmph_w19omx\dll\3748.ini.basta
C:\tmph_w19omx\dll\4840.ini.basta
C:\tmph_w19omx\dll\640.ini.basta
C:\tmph_w19omx\dll\660.ini.basta
C:\tmph_w19omx\dll\6688.ini.basta
C:\tmph_w19omx\dll\7488.ini.basta
C:\tmph_w19omx\dll\752.ini.basta
C:\tmph_w19omx\dll\8076.ini.basta
C:\tmph_w19omx\dll\8464.ini.basta
C:\tmph_w19omx\dll\8492.ini.basta
C:\tmph_w19omx\dll\9612.ini.basta
C:\tmph_w19omx\dll\9812.ini.basta
C:\tmph_w19omx\dll\9844.ini.basta
C:\tmph_w19omx\dll\9848.ini.basta
C:\tmph_w19omx\bin\yZqOZxK.exe.basta
C:\tmpeoix3ml5\dll\xAYiJbh.dll.basta
C:\tmpeoix3ml5\bin\Procmon.exe.basta
C:\tmph_w19omx\bin\geckodriver.exe.basta
C:\tmph_w19omx\lib\__init__.py.basta
C:\tmph_w19omx\modules\__init__.py.basta
C:\tmph_w19omx\tests\test_analysis_packages.py.basta
C:\tmph_w19omx\tests\test_analyzer.py.basta
C:\tmph_w19omx\tests\test_analyzer_files.py.basta
C:\tmph_w19omx\tests\test_analyzer_process_list.py.basta
C:\tmph_w19omx\dll\capemon.dll.basta
C:\tmpsv59hb03\bin\autoit3.exe.basta
C:\tmph_w19omx\dll\wAImEkvO.dll.basta
C:\tmpsv59hb03\bin\loader.exe.basta
C:\tmpsv59hb03\bin\loader_x64.exe.basta
C:\tmpsv59hb03\bin\mQGRlohr.exe.basta
C:\tmph_w19omx\dll\capemon_x64.dll.basta
C:\tmpsv59hb03\bin\ouqumVM.exe.basta
C:\tmpsv59hb03\bin\procmon.pmc.basta
C:\tmpsv59hb03\bin\psexec.exe.basta
C:\tmpsv59hb03\data\msix.ps1.basta
C:\tmpsv59hb03\dll\660.ini.basta
C:\tmpsv59hb03\bin\signtool.exe.basta
C:\tmph_w19omx\dll\QnAZYtX.dll.basta
C:\FDwSxoT\memory\8492.dmp.basta
C:\tmph_w19omx\bin\Procmon.exe.basta
C:\tmpsv59hb03\lib\__init__.py.basta
C:\tmpsv59hb03\modules\__init__.py.basta
C:\tmpsv59hb03\tests\test_analysis_packages.py.basta
C:\tmpsv59hb03\tests\test_analyzer.py.basta
C:\tmpsv59hb03\tests\test_analyzer_files.py.basta
C:\tmpsv59hb03\tests\test_analyzer_process_list.py.basta
C:\tmpsv59hb03\bin\geckodriver.exe.basta
C:\tmpugscyilj\bin\autoit3.exe.basta
C:\tmpugscyilj\bin\CcLHXMEM.exe.basta
C:\tmpugscyilj\bin\loader.exe.basta
C:\tmpugscyilj\bin\loader_x64.exe.basta
C:\tmpugscyilj\bin\pDCNQwo.exe.basta
C:\tmpugscyilj\bin\PPLinject.exe.basta
C:\tmpugscyilj\bin\PPLinject64.exe.basta
C:\tmpsv59hb03\dll\capemon.dll.basta
C:\tmpugscyilj\bin\procmon.pmc.basta
C:\tmpsv59hb03\dll\JvQumA.dll.basta
C:\tmpugscyilj\bin\signtool.exe.basta
C:\tmpugscyilj\data\msix.ps1.basta
C:\tmpugscyilj\dll\6156.ini.basta
C:\tmpugscyilj\dll\672.ini.basta
C:\tmpugscyilj\dll\8312.ini.basta
C:\tmpugscyilj\bin\psexec.exe.basta
C:\tmpsv59hb03\dll\capemon_x64.dll.basta
C:\tmpsv59hb03\dll\LVCETPK.dll.basta
C:\tmpsv59hb03\bin\Procmon.exe.basta
C:\tmpugscyilj\lib\__init__.py.basta
C:\tmpugscyilj\modules\__init__.py.basta
C:\tmpugscyilj\tests\test_analysis_packages.py.basta
C:\tmpugscyilj\tests\test_analyzer.py.basta
C:\tmpugscyilj\tests\test_analyzer_files.py.basta
C:\tmpugscyilj\tests\test_analyzer_process_list.py.basta
C:\tmpugscyilj\bin\geckodriver.exe.basta
C:\tmpxa6n6jlb\bin\autoit3.exe.basta
C:\tmpxa6n6jlb\bin\loader.exe.basta
C:\tmpxa6n6jlb\bin\loader_x64.exe.basta
C:\tmpugscyilj\dll\capemon.dll.basta
C:\tmpxa6n6jlb\bin\PPLinject.exe.basta
C:\tmpxa6n6jlb\bin\PPLinject64.exe.basta
C:\tmpxa6n6jlb\bin\procmon.pmc.basta
C:\tmpxa6n6jlb\bin\psexec.exe.basta
C:\tmpugscyilj\dll\lvnmWnN.dll.basta
C:\tmpxa6n6jlb\bin\RGcTsqq.exe.basta
C:\tmpxa6n6jlb\bin\signtool.exe.basta
C:\tmpxa6n6jlb\data\msix.ps1.basta
C:\tmpxa6n6jlb\dll\3512.ini.basta
C:\tmpxa6n6jlb\dll\3936.ini.basta
C:\tmpxa6n6jlb\dll\5156.ini.basta
C:\tmpxa6n6jlb\dll\5360.ini.basta
C:\tmpxa6n6jlb\dll\6488.ini.basta
C:\tmpxa6n6jlb\dll\668.ini.basta
C:\tmpxa6n6jlb\dll\780.ini.basta
C:\tmpxa6n6jlb\bin\tEubcIZA.exe.basta
C:\tmpugscyilj\dll\capemon_x64.dll.basta
C:\tmpugscyilj\dll\cweSNMQP.dll.basta
C:\tmpugscyilj\bin\Procmon.exe.basta
C:\tmpxa6n6jlb\lib\__init__.py.basta
C:\tmpxa6n6jlb\modules\__init__.py.basta
C:\tmpxa6n6jlb\tests\test_analysis_packages.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer_files.py.basta
C:\tmpxa6n6jlb\tests\test_analyzer_process_list.py.basta
C:\tmpxa6n6jlb\bin\geckodriver.exe.basta
C:\tmpyhyv52bd\bin\bQqKdCRm.exe.basta
C:\tmpxa6n6jlb\dll\capemon.dll.basta
C:\tmpyhyv52bd\bin\autoit3.exe.basta
C:\tmpyhyv52bd\bin\loader.exe.basta
C:\tmpyhyv52bd\bin\loader_x64.exe.basta
C:\tmpyhyv52bd\bin\PPLinject64.exe.basta
C:\tmpyhyv52bd\bin\procmon.pmc.basta
C:\tmpxa6n6jlb\dll\HiyzVY.dll.basta
C:\tmpyhyv52bd\bin\rZsBKAg.exe.basta
C:\tmpyhyv52bd\bin\psexec.exe.basta
C:\tmpyhyv52bd\data\msix.ps1.basta
C:\tmpyhyv52bd\dll\1528.ini.basta
C:\tmpyhyv52bd\dll\3252.ini.basta
C:\tmpyhyv52bd\dll\4024.ini.basta
C:\tmpyhyv52bd\dll\604.ini.basta
C:\tmpyhyv52bd\dll\612.ini.basta
C:\tmpyhyv52bd\dll\6500.ini.basta
C:\tmpyhyv52bd\dll\7020.ini.basta
C:\tmpyhyv52bd\dll\7164.ini.basta
C:\tmpyhyv52bd\dll\724.ini.basta
C:\tmpyhyv52bd\dll\7348.ini.basta
C:\tmpyhyv52bd\dll\7380.ini.basta
C:\tmpyhyv52bd\dll\7508.ini.basta
C:\tmpyhyv52bd\bin\signtool.exe.basta
C:\tmpxa6n6jlb\dll\capemon_x64.dll.basta
C:\tmpxa6n6jlb\dll\dZFlnqa.dll.basta
C:\tmpxa6n6jlb\bin\Procmon.exe.basta
C:\tmpyhyv52bd\lib\__init__.py.basta
C:\tmpyhyv52bd\modules\__init__.py.basta
C:\tmpyhyv52bd\tests\test_analysis_packages.py.basta
C:\tmpyhyv52bd\tests\test_analyzer.py.basta
C:\tmpyhyv52bd\tests\test_analyzer_files.py.basta
C:\tmpyhyv52bd\tests\test_analyzer_process_list.py.basta
C:\tmpyhyv52bd\bin\geckodriver.exe.basta
C:\tmpyhyv52bd\dll\capemon.dll.basta
C:\tmp_4c73x2e\bin\autoit3.exe.basta
C:\tmp_4c73x2e\bin\FKHbweEn.exe.basta
C:\tmp_4c73x2e\bin\loader_x64.exe.basta
C:\tmp_4c73x2e\bin\loader.exe.basta
C:\tmp_4c73x2e\bin\procmon.pmc.basta
C:\tmp_4c73x2e\bin\psexec.exe.basta
C:\tmp_4c73x2e\bin\signtool.exe.basta
C:\tmpyhyv52bd\dll\PrQuPli.dll.basta
C:\tmp_4c73x2e\data\msix.ps1.basta
C:\tmp_4c73x2e\dll\660.ini.basta
C:\tmp_4c73x2e\bin\wCjxibK.exe.basta
C:\tmpyhyv52bd\dll\alQTNhGC.dll.basta
C:\tmpyhyv52bd\dll\capemon_x64.dll.basta
C:\tmpyhyv52bd\bin\Procmon.exe.basta
C:\tmp_4c73x2e\lib\__init__.py.basta
C:\tmp_4c73x2e\modules\__init__.py.basta
C:\tmp_4c73x2e\tests\test_analysis_packages.py.basta
C:\tmp_4c73x2e\tests\test_analyzer.py.basta
C:\tmp_4c73x2e\tests\test_analyzer_files.py.basta
C:\tmp_4c73x2e\tests\test_analyzer_process_list.py.basta
C:\VhGXHyPr\CAPE\7652_14527944554381172024.basta
C:\VhGXHyPr\CAPE\7652_152352750491172024.basta
C:\VhGXHyPr\CAPE\7652_1803158564381172024.basta
C:\VhGXHyPr\CAPE\7652_42672564381172024.basta
C:\VhGXHyPr\tlsdump\tlsdump.log.basta
C:\VJCYHvoxA\debugger\5436.log.basta
C:\VJCYHvoxA\tlsdump\tlsdump.log.basta
C:\wJvzAqbRj\tlsdump\tlsdump.log.basta
C:\YtGTvE\CAPE\7728_174742063756428562024.basta
C:\YtGTvE\CAPE\7728_184736053161228562024.basta
C:\YtGTvE\CAPE\7728_223072853656428562024.basta
C:\YtGTvE\CAPE\7728_23050856161228562024.basta
C:\YtGTvE\CAPE\7728_255021073656428562024.basta
C:\YtGTvE\CAPE\7728_48569953656428562024.basta
C:\YtGTvE\CAPE\7728_565394456161228562024.basta
C:\YtGTvE\tlsdump\tlsdump.log.basta
C:\zKlZnVrs\CAPE\4908_2531685057591411472024.basta
C:\zKlZnVrs\tlsdump\tlsdump.log.basta
C:\Archivos de programa\7-Zip\Lang\af.txt.basta
C:\Archivos de programa\7-Zip\Lang\an.txt.basta
C:\Archivos de programa\7-Zip\Lang\ar.txt.basta
C:\Archivos de programa\7-Zip\Lang\ast.txt.basta
C:\Archivos de programa\7-Zip\Lang\az.txt.basta
C:\Archivos de programa\7-Zip\Lang\ba.txt.basta
C:\Archivos de programa\7-Zip\Lang\be.txt.basta
C:\Archivos de programa\7-Zip\Lang\bg.txt.basta
C:\Archivos de programa\7-Zip\Lang\bn.txt.basta
C:\Archivos de programa\7-Zip\Lang\br.txt.basta
C:\Archivos de programa\7-Zip\Lang\ca.txt.basta
C:\Archivos de programa\7-Zip\Lang\co.txt.basta
C:\Archivos de programa\7-Zip\Lang\cs.txt.basta
C:\Archivos de programa\7-Zip\Lang\cy.txt.basta
C:\Archivos de programa\7-Zip\Lang\da.txt.basta
C:\Archivos de programa\7-Zip\Lang\de.txt.basta
C:\Archivos de programa\7-Zip\Lang\el.txt.basta
C:\Archivos de programa\7-Zip\Lang\en.ttt.basta
C:\Archivos de programa\7-Zip\Lang\eo.txt.basta
C:\Archivos de programa\7-Zip\Lang\es.txt.basta
C:\Archivos de programa\7-Zip\Lang\et.txt.basta
C:\Archivos de programa\7-Zip\Lang\eu.txt.basta
C:\Archivos de programa\7-Zip\Lang\ext.txt.basta
C:\Archivos de programa\7-Zip\Lang\fa.txt.basta
C:\Archivos de programa\7-Zip\Lang\fi.txt.basta
C:\Archivos de programa\7-Zip\Lang\fr.txt.basta
C:\Archivos de programa\7-Zip\Lang\fur.txt.basta
C:\Archivos de programa\7-Zip\Lang\fy.txt.basta
C:\Archivos de programa\7-Zip\Lang\ga.txt.basta
C:\Archivos de programa\7-Zip\Lang\gl.txt.basta
C:\Archivos de programa\7-Zip\Lang\gu.txt.basta
C:\Archivos de programa\7-Zip\Lang\he.txt.basta
C:\Archivos de programa\7-Zip\Lang\hi.txt.basta
C:\Archivos de programa\7-Zip\Lang\hr.txt.basta
C:\Archivos de programa\7-Zip\Lang\hu.txt.basta
C:\Archivos de programa\7-Zip\Lang\hy.txt.basta
C:\Archivos de programa\7-Zip\Lang\id.txt.basta
C:\Archivos de programa\7-Zip\Lang\io.txt.basta
C:\Archivos de programa\7-Zip\Lang\is.txt.basta
C:\Archivos de programa\7-Zip\Lang\it.txt.basta
C:\tmp_4c73x2e\bin\geckodriver.exe.basta
C:\Archivos de programa\7-Zip\Lang\ja.txt.basta
C:\Archivos de programa\7-Zip\Lang\kaa.txt.basta
C:\Archivos de programa\7-Zip\Lang\kab.txt.basta
C:\Archivos de programa\7-Zip\Lang\kk.txt.basta
C:\Archivos de programa\7-Zip\Lang\ko.txt.basta
C:\Archivos de programa\7-Zip\Lang\ku-ckb.txt.basta
C:\Archivos de programa\7-Zip\Lang\ku.txt.basta
C:\Archivos de programa\7-Zip\Lang\ky.txt.basta
C:\Archivos de programa\7-Zip\Lang\ka.txt.basta
C:\Archivos de programa\7-Zip\Lang\lij.txt.basta
C:\Archivos de programa\7-Zip\Lang\lt.txt.basta
C:\Archivos de programa\7-Zip\Lang\lv.txt.basta
C:\Archivos de programa\7-Zip\Lang\mn.txt.basta
C:\Archivos de programa\7-Zip\Lang\mk.txt.basta
C:\Archivos de programa\7-Zip\Lang\mng.txt.basta
C:\Archivos de programa\7-Zip\Lang\mng2.txt.basta
C:\Archivos de programa\7-Zip\Lang\mr.txt.basta
C:\Archivos de programa\7-Zip\Lang\ms.txt.basta
C:\Archivos de programa\7-Zip\Lang\nb.txt.basta
C:\Archivos de programa\7-Zip\Lang\ne.txt.basta
C:\Archivos de programa\7-Zip\Lang\pl.txt.basta
C:\Archivos de programa\7-Zip\Lang\ps.txt.basta
C:\Archivos de programa\7-Zip\Lang\pt-br.txt.basta
C:\Archivos de programa\7-Zip\Lang\pt.txt.basta
C:\Archivos de programa\7-Zip\Lang\ru.txt.basta
C:\Archivos de programa\7-Zip\Lang\sa.txt.basta
C:\Archivos de programa\7-Zip\Lang\sk.txt.basta
C:\Archivos de programa\7-Zip\Lang\sr-spl.txt.basta
C:\Archivos de programa\7-Zip\Lang\ta.txt.basta
C:\Archivos de programa\7-Zip\Lang\th.txt.basta
C:\Archivos de programa\7-Zip\Lang\sw.txt.basta
C:\Archivos de programa\7-Zip\Lang\sv.txt.basta
C:\Archivos de programa\7-Zip\Lang\va.txt.basta
C:\Archivos de programa\7-Zip\Lang\vi.txt.basta
C:\Archivos de programa\7-Zip\Lang\zh-tw.txt.basta
C:\Archivos de programa\RUXIM\ar-SA\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-100.png.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-140.png.basta
C:\tmp_4c73x2e\dll\capemon_x64.dll.basta
C:\Archivos de programa\RUXIM\Assets\MicrosoftLogoAndText.png.basta
C:\Archivos de programa\RUXIM\Assets\Tile1.scale-100.png.basta
C:\Archivos de programa\RUXIM\bg-bg\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\cs-cz\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-200.png.basta
C:\Archivos de programa\RUXIM\de-DE\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\el-gr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\en-gb\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\en-us\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-180.png.basta
C:\Archivos de programa\RUXIM\da-dk\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\es-es\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\es-MX\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\et-ee\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\fi-fi\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\fr-CA\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\he-IL\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\fr-FR\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\Assets\EOS.scale-240.png.basta
C:\Archivos de programa\RUXIM\hr-hr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\hu-hu\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\it-it\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ja-JP\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\ko-kr\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\lt-lt\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\pl-pl\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\lv-lv\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\pt-br\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\nb-no\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\nl-NL\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\pt-pt\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\sk-sk\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\uk-ua\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\zh-cn\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\RUXIM\th-th\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\VideoLAN\VLC\AUTHORS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\COPYING.txt.basta
C:\Archivos de programa\RUXIM\zh-TW\RUXIMUXResources.dll.mui.basta
C:\Archivos de programa\VideoLAN\VLC\New_Skins.url.basta
C:\Archivos de programa\VideoLAN\VLC\libvlc.dll.basta
C:\Archivos de programa\VideoLAN\VLC\README.txt.basta
C:\Archivos de programa\VideoLAN\VLC\THANKS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\NEWS.txt.basta
C:\Archivos de programa\VideoLAN\VLC\uninstall.log.basta
C:\Archivos de programa\VideoLAN\VLC\VideoLAN Website.url.basta
C:\Archivos de programa\VideoLAN\VLC\uninstall.exe.basta
C:\Archivos de programa\VideoLAN\VLC\vlc-cache-gen.exe.basta
C:\Program Files (x86)\Google\GoogleUpdater\prefs.json.basta
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.basta
C:\Archivos de programa\VideoLAN\VLC\axvlc.dll.basta
C:\tmp_4c73x2e\bin\Procmon.exe.basta
C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins.basta
C:\Program Files (x86)\Microsoft\Edge\Edge.dat.basta
C:\Archivos de programa\VideoLAN\VLC\vlc.exe.basta
C:\Archivos de programa\VideoLAN\VLC\npvlc.dll.basta
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.old.basta
C:\Archivos de programa\VideoLAN\VLC\libvlccore.dll.basta
C:\ProgramData\Men\xfa Inicio\Programas\Google Chrome.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Microsoft Edge.lnk.basta
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe.basta
C:\ProgramData\Microsoft\Diagnosis\parse.dat.basta
C:\ProgramData\Microsoft\Diagnosis\osver.txt.basta
C:\ProgramData\Microsoft\MF\Active.GRL.basta
C:\ProgramData\Microsoft\User Account Pictures\defaultuser0.dat.basta
C:\ProgramData\Microsoft\User Account Pictures\pacop.dat.basta
C:\ProgramData\Microsoft\User Account Pictures\user-32.png.basta
C:\ProgramData\Microsoft\User Account Pictures\user-192.png.basta
C:\ProgramData\Microsoft\User Account Pictures\guest.png.basta
C:\ProgramData\Microsoft\User Account Pictures\user-40.png.basta
C:\ProgramData\Microsoft\User Account Pictures\user-48.png.basta
C:\ProgramData\Microsoft OneDrive\setup\refcount.ini.basta
C:\ProgramData\Microsoft\User Account Pictures\user.png.basta
C:\tmp228rx8rl\data\yara\AgentTesla.yar.basta
C:\tmp228rx8rl\data\yara\AntiCuckoo.yar.basta
C:\tmp228rx8rl\data\yara\Blister.yar.basta
C:\tmp228rx8rl\data\yara\BuerLoader.yar.basta
C:\tmp228rx8rl\data\yara\EmotetPacker.yar.basta
C:\tmp228rx8rl\data\yara\Formbook.yar.basta
C:\tmp228rx8rl\data\yara\GetTickCountAntiVM.yar.basta
C:\tmp228rx8rl\data\yara\Guloader.yar.basta
C:\tmp228rx8rl\data\yara\HeavensSyscall.yar.basta
C:\tmp228rx8rl\data\yara\IcedID.yar.basta
C:\tmp228rx8rl\data\yara\Latrodectus.yar.basta
C:\tmp228rx8rl\data\yara\Lumma.yar.basta
C:\tmp228rx8rl\data\yara\ModiLoader.yar.basta
C:\tmp228rx8rl\data\yara\MysterySnail.yar.basta
C:\tmp228rx8rl\data\yara\capemon.yac.basta
C:\tmp228rx8rl\data\yara\NSIS.yar.basta
C:\tmp228rx8rl\data\yara\Pafish.yar.basta
C:\tmp228rx8rl\data\yara\Pikabot.yar.basta
C:\tmp228rx8rl\data\yara\QakBot.yar.basta
C:\tmp228rx8rl\data\yara\RdtscpAntiVM.yar.basta
C:\tmp228rx8rl\data\yara\Rhadamanthys.yar.basta
C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.basta
C:\tmp228rx8rl\data\yara\RisePro.yar.basta
C:\tmp228rx8rl\data\yara\SingleStepAntiHook.yar.basta
C:\ProgramData\Microsoft\User Account Pictures\user.bmp.basta
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat.basta
C:\tmp228rx8rl\data\yara\Stealc.yar.basta
C:\tmp228rx8rl\data\yara\Socks5Systemz.yar.basta
C:\tmp228rx8rl\data\yara\Syscall.yar.basta
C:\tmp228rx8rl\data\yara\UrsnifV3.yar.basta
C:\tmp228rx8rl\data\yara\Zloader.yar.basta
C:\tmp228rx8rl\lib\common\parse_pe.py.basta
C:\tmp228rx8rl\lib\common\errors.py.basta
C:\tmp228rx8rl\lib\common\zip_utils.py.basta
C:\tmp228rx8rl\lib\core\privileges.py.basta
C:\tmp228rx8rl\lib\core\packages.py.basta
C:\tmp228rx8rl\lib\core\pipe.py.basta
C:\tmp228rx8rl\modules\auxiliary\amsi_collector.py.basta
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi.basta
C:\tmp228rx8rl\modules\auxiliary\disguise.py.basta
C:\tmp228rx8rl\modules\auxiliary\html_scraper.py.basta
C:\tmp228rx8rl\modules\auxiliary\recentfiles.py.basta
C:\tmp228rx8rl\modules\auxiliary\human.py.basta
C:\tmp228rx8rl\modules\auxiliary\screenshots.py.basta
C:\tmp228rx8rl\modules\auxiliary\pre_script.py.basta
C:\tmp228rx8rl\modules\packages\access.py.basta
C:\tmp228rx8rl\modules\packages\applet.py.basta
C:\tmp228rx8rl\modules\packages\chrome.py.basta
C:\tmp228rx8rl\modules\packages\doc.py.basta
C:\tmp228rx8rl\modules\packages\eml.py.basta
C:\tmp228rx8rl\modules\packages\exe.py.basta
C:\tmp228rx8rl\modules\auxiliary\__init__.py.basta
C:\tmp228rx8rl\modules\packages\doc2016.py.basta
C:\tmp228rx8rl\modules\packages\firefox.py.basta
C:\tmp228rx8rl\modules\packages\hta.py.basta
C:\tmp228rx8rl\modules\packages\js.py.basta
C:\tmp228rx8rl\modules\packages\inp.py.basta
C:\tmp228rx8rl\modules\packages\msix.py.basta
C:\tmp228rx8rl\modules\packages\nsis.py.basta
C:\tmp228rx8rl\modules\packages\ppt.py.basta
C:\tmp228rx8rl\modules\packages\one.py.basta
C:\tmp228rx8rl\modules\packages\rar.py.basta
C:\tmp228rx8rl\modules\packages\python.py.basta
C:\tmp228rx8rl\modules\packages\regsvr.py.basta
C:\tmp228rx8rl\modules\packages\Shellcode-Unpacker.py.basta
C:\tmp228rx8rl\modules\packages\swf.py.basta
C:\tmp228rx8rl\modules\packages\Unpacker.py.basta
C:\tmp228rx8rl\modules\packages\xls.py.basta
C:\tmp228rx8rl\modules\packages\xls2016.py.basta
C:\tmp228rx8rl\modules\packages\xps.py.basta
C:\tmp228rx8rl\modules\packages\xslt.py.basta
C:\tmp228rx8rl\modules\packages\zip.py.basta
C:\tmp228rx8rl\modules\packages\zip_compound.py.basta
C:\tmp228rx8rl\modules\packages\__init__.py.basta
C:\tmp228rx8rl\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\data\yara\AgentTesla.yar.basta
C:\tmp3bs9izg4\data\yara\AntiCuckoo.yar.basta
C:\tmp3bs9izg4\data\yara\Al-khaser.yar.basta
C:\tmp3bs9izg4\data\yara\BumbleBee.yar.basta
C:\tmp3bs9izg4\data\yara\capemon.yac.basta
C:\tmp3bs9izg4\data\yara\BuerLoader.yar.basta
C:\tmp3bs9izg4\data\yara\DarkGate.yar.basta
C:\tmp3bs9izg4\data\yara\EmotetPacker.yar.basta
C:\tmp3bs9izg4\data\yara\Formbook.yar.basta
C:\tmp228rx8rl\modules\packages\js_antivm.py.basta
C:\tmp228rx8rl\modules\packages\Unpacker_ps1.py.basta
C:\tmp3bs9izg4\data\yara\IcedID.yar.basta
C:\tmp228rx8rl\modules\packages\wsf.py.basta
C:\tmp3bs9izg4\data\yara\Latrodectus.yar.basta
C:\tmp3bs9izg4\data\yara\Lumma.yar.basta
C:\tmp3bs9izg4\data\yara\MysterySnail.yar.basta
C:\tmp3bs9izg4\data\yara\Pikabot.yar.basta
C:\tmp3bs9izg4\data\yara\RdtscpAntiVM.yar.basta
C:\tmp3bs9izg4\data\yara\Rhadamanthys.yar.basta
C:\tmp3bs9izg4\data\yara\HeavensSyscall.yar.basta
C:\tmp3bs9izg4\data\yara\NSIS.yar.basta
C:\tmp228rx8rl\modules\packages\Unpacker_zip.py.basta
C:\tmp3bs9izg4\lib\core\packages.py.basta
C:\tmp3bs9izg4\lib\core\privileges.py.basta
C:\tmp3bs9izg4\lib\core\__init__.py.basta
C:\tmp3bs9izg4\modules\auxiliary\amsi_collector.py.basta
C:\tmp3bs9izg4\modules\auxiliary\autoruns.py.basta
C:\tmp3bs9izg4\modules\auxiliary\browser.py.basta
C:\tmp3bs9izg4\modules\auxiliary\curtain.py.basta
C:\tmp3bs9izg4\modules\auxiliary\digisig.py.basta
C:\tmp3bs9izg4\modules\auxiliary\during_script.py.basta
C:\tmp3bs9izg4\modules\auxiliary\disguise.py.basta
C:\tmp3bs9izg4\modules\auxiliary\filepickup.py.basta
C:\tmp3bs9izg4\modules\auxiliary\evtx.py.basta
C:\tmp3bs9izg4\modules\auxiliary\html_scraper.py.basta
C:\tmp3bs9izg4\modules\auxiliary\permissions.py.basta
C:\tmp3bs9izg4\modules\auxiliary\pre_script.py.basta
C:\tmp3bs9izg4\modules\auxiliary\amsi.py.basta
C:\tmp3bs9izg4\modules\auxiliary\procmon.py.basta
C:\tmp3bs9izg4\modules\auxiliary\recentfiles.py.basta
C:\tmp3bs9izg4\modules\auxiliary\human.py.basta
C:\tmp3bs9izg4\modules\auxiliary\__init__.py.basta
C:\tmp3bs9izg4\modules\packages\access.py.basta
C:\tmp3bs9izg4\modules\auxiliary\tlsdump.py.basta
C:\tmp3bs9izg4\modules\auxiliary\usage.py.basta
C:\tmp3bs9izg4\modules\packages\applet.py.basta
C:\tmp3bs9izg4\modules\packages\archive.py.basta
C:\tmp3bs9izg4\data\yara\Pafish.yar.basta
C:\tmp3bs9izg4\lib\core\pipe.py.basta
C:\tmp3bs9izg4\modules\packages\autoit.py.basta
C:\tmp3bs9izg4\modules\packages\doc.py.basta
C:\tmp3bs9izg4\modules\packages\doc2016.py.basta
C:\tmp3bs9izg4\modules\packages\doc_antivm.py.basta
C:\tmp3bs9izg4\modules\packages\edge.py.basta
C:\tmp3bs9izg4\modules\packages\eml.py.basta
C:\tmp3bs9izg4\modules\packages\exe.py.basta
C:\tmp3bs9izg4\modules\packages\firefox.py.basta
C:\tmp3bs9izg4\modules\packages\generic.py.basta
C:\tmp3bs9izg4\modules\packages\hta.py.basta
C:\tmp3bs9izg4\modules\packages\hwp.py.basta
C:\tmp3bs9izg4\modules\packages\ichitaro.py.basta
C:\tmp3bs9izg4\modules\packages\ie.py.basta
C:\tmp3bs9izg4\modules\packages\inf.py.basta
C:\tmp3bs9izg4\modules\packages\inp.py.basta
C:\tmp3bs9izg4\modules\packages\jar.py.basta
C:\tmp3bs9izg4\modules\packages\js.py.basta
C:\tmp3bs9izg4\modules\packages\js_antivm.py.basta
C:\tmp3bs9izg4\modules\packages\lnk.py.basta
C:\tmp3bs9izg4\modules\packages\mht.py.basta
C:\tmp3bs9izg4\modules\packages\msbuild.py.basta
C:\tmp3bs9izg4\modules\packages\msg.py.basta
C:\tmp3bs9izg4\modules\packages\msi.py.basta
C:\tmp3bs9izg4\modules\packages\msix.py.basta
C:\tmp3bs9izg4\modules\packages\nsis.py.basta
C:\tmp3bs9izg4\modules\packages\ollydbg.py.basta
C:\tmp3bs9izg4\modules\packages\one.py.basta
C:\tmp3bs9izg4\modules\packages\pdf.py.basta
C:\tmp3bs9izg4\modules\packages\ppt.py.basta
C:\tmp3bs9izg4\modules\packages\ppt2016.py.basta
C:\tmp3bs9izg4\modules\packages\ps1.py.basta
C:\tmp3bs9izg4\modules\packages\pub.py.basta
C:\tmp3bs9izg4\modules\packages\pub2016.py.basta
C:\tmp3bs9izg4\modules\packages\rar.py.basta
C:\tmp3bs9izg4\modules\packages\reg.py.basta
C:\tmp3bs9izg4\modules\packages\regsvr.py.basta
C:\tmp3bs9izg4\modules\packages\sct.py.basta
C:\tmp3bs9izg4\modules\packages\cpl.py.basta
C:\tmp3bs9izg4\modules\packages\dll.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode-Unpacker.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode.py.basta
C:\tmp3bs9izg4\modules\packages\Shellcode_x64.py.basta
C:\tmp3bs9izg4\modules\packages\swf.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_dll.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_js.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_ps1.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_regsvr.py.basta
C:\tmp3bs9izg4\modules\packages\Unpacker_zip.py.basta
C:\tmp3bs9izg4\modules\packages\vawtrak.py.basta
C:\tmp3bs9izg4\modules\packages\vbejse.py.basta
C:\tmp3bs9izg4\modules\packages\vbs.py.basta
C:\tmp3bs9izg4\modules\packages\wsf.py.basta
C:\tmp3bs9izg4\modules\packages\xls.py.basta
C:\tmp3bs9izg4\modules\packages\xls2016.py.basta
C:\tmp3bs9izg4\modules\packages\xps.py.basta
C:\tmp3bs9izg4\modules\packages\xslt.py.basta
C:\tmp3bs9izg4\modules\packages\zip.py.basta
C:\tmp3bs9izg4\modules\packages\zip_compound.py.basta
C:\tmp3bs9izg4\modules\packages\__init__.py.basta
C:\tmp3bs9izg4\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\data\yara\AgentTesla.yar.basta
C:\tmp3ljmycja\data\yara\Al-khaser.yar.basta
C:\tmp3ljmycja\data\yara\AntiCuckoo.yar.basta
C:\tmp3ljmycja\data\yara\Blister.yar.basta
C:\tmp3ljmycja\data\yara\BuerLoader.yar.basta
C:\tmp3ljmycja\data\yara\BumbleBee.yar.basta
C:\tmp3ljmycja\data\yara\CargoBayLoader.yar.basta
C:\tmp3ljmycja\data\yara\DarkGate.yar.basta
C:\tmp3ljmycja\data\yara\DarkGateLoader.yar.basta
C:\tmp3ljmycja\data\yara\DoomedLoader.yar.basta
C:\tmp3ljmycja\data\yara\DridexLoader.yar.basta
C:\tmp3ljmycja\data\yara\EmotetPacker.yar.basta
C:\tmp3ljmycja\data\yara\Formbook.yar.basta
C:\tmp3ljmycja\data\yara\GetTickCountAntiVM.yar.basta
C:\tmp3ljmycja\data\yara\Guloader.yar.basta
C:\tmp3ljmycja\data\yara\HeavensSyscall.yar.basta
C:\tmp3ljmycja\data\yara\IcedID.yar.basta
C:\tmp3ljmycja\data\yara\Latrodectus.yar.basta
C:\tmp3ljmycja\data\yara\Lumma.yar.basta
C:\tmp3ljmycja\data\yara\ModiLoader.yar.basta
C:\tmp3ljmycja\data\yara\MysterySnail.yar.basta
C:\tmp3ljmycja\data\yara\NSIS.yar.basta
C:\tmp3ljmycja\data\yara\Pafish.yar.basta
C:\tmp3ljmycja\data\yara\Pikabot.yar.basta
C:\tmp3ljmycja\data\yara\QakBot.yar.basta
C:\tmp3ljmycja\data\yara\RdtscpAntiVM.yar.basta
C:\tmp3ljmycja\data\yara\Rhadamanthys.yar.basta
C:\tmp3ljmycja\data\yara\RisePro.yar.basta
C:\tmp3ljmycja\data\yara\SingleStepAntiHook.yar.basta
C:\tmp3ljmycja\data\yara\SmokeLoader.yar.basta
C:\tmp3ljmycja\data\yara\Socks5Systemz.yar.basta
C:\tmp3ljmycja\data\yara\Stealc.yar.basta
C:\tmp3bs9izg4\modules\packages\service_dll.py.basta
C:\tmp3ljmycja\data\yara\Syscall.yar.basta
C:\tmp3ljmycja\data\yara\UPX.yar.basta
C:\tmp3ljmycja\data\yara\VBCrypter.yar.basta
C:\tmp3ljmycja\data\yara\XWorm.yar.basta
C:\tmp3ljmycja\data\yara\Zloader.yar.basta
C:\tmp3ljmycja\data\yara\UrsnifV3.yar.basta
C:\tmp3ljmycja\lib\api\process.py.basta
C:\tmp3ljmycja\lib\api\utils.py.basta
C:\tmp3ljmycja\lib\api\__init__.py.basta
C:\tmp3ljmycja\lib\common\abstracts.py.basta
C:\tmp3ljmycja\lib\common\common.py.basta
C:\tmp3ljmycja\lib\common\constants.py.basta
C:\tmp3ljmycja\lib\common\defines.py.basta
C:\tmp3ljmycja\lib\api\screenshot.py.basta
C:\tmp3ljmycja\lib\common\exceptions.py.basta
C:\tmp3ljmycja\lib\common\hashing.py.basta
C:\tmp3ljmycja\lib\common\errors.py.basta
C:\tmp3ljmycja\lib\common\parse_pe.py.basta
C:\tmp3ljmycja\lib\common\rand.py.basta
C:\tmp3ljmycja\lib\common\registry.py.basta
C:\tmp3ljmycja\lib\common\results.py.basta
C:\tmp3ljmycja\lib\common\__init__.py.basta
C:\tmp3ljmycja\lib\common\zip_utils.py.basta
C:\tmp3ljmycja\lib\core\compound.py.basta
C:\tmp3ljmycja\lib\core\config.py.basta
C:\tmp3ljmycja\lib\core\log.py.basta
C:\tmp3ljmycja\lib\core\privileges.py.basta
C:\tmp3ljmycja\lib\core\pipe.py.basta
C:\tmp3ljmycja\lib\core\startup.py.basta
C:\tmp3ljmycja\lib\core\__init__.py.basta
C:\tmp3ljmycja\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\amsi_collector.py.basta
C:\tmp3ljmycja\modules\auxiliary\autoruns.py.basta
C:\tmp3ljmycja\modules\auxiliary\browser.py.basta
C:\tmp3ljmycja\modules\auxiliary\curtain.py.basta
C:\tmp3ljmycja\modules\auxiliary\amsi.py.basta
C:\tmp3ljmycja\modules\auxiliary\digisig.py.basta
C:\tmp3ljmycja\modules\auxiliary\during_script.py.basta
C:\tmp3ljmycja\modules\auxiliary\disguise.py.basta
C:\tmp3ljmycja\modules\auxiliary\filepickup.py.basta
C:\tmp3ljmycja\modules\auxiliary\html_scraper.py.basta
C:\tmp3ljmycja\modules\auxiliary\evtx.py.basta
C:\tmp3ljmycja\modules\auxiliary\permissions.py.basta
C:\tmp3ljmycja\modules\auxiliary\human.py.basta
C:\tmp3ljmycja\modules\auxiliary\pre_script.py.basta
C:\tmp3ljmycja\modules\auxiliary\procmon.py.basta
C:\tmp3ljmycja\modules\auxiliary\recentfiles.py.basta
C:\tmp3ljmycja\modules\auxiliary\screenshots.py.basta
C:\tmp3ljmycja\modules\auxiliary\sysmon.py.basta
C:\tmp3ljmycja\modules\auxiliary\tlsdump.py.basta
C:\tmp3ljmycja\modules\auxiliary\__init__.py.basta
C:\tmp3ljmycja\modules\auxiliary\usage.py.basta
C:\tmp3ljmycja\modules\packages\access.py.basta
C:\tmp3ljmycja\modules\packages\applet.py.basta
C:\tmp3ljmycja\modules\packages\autoit.py.basta
C:\tmp3ljmycja\modules\packages\archive.py.basta
C:\tmp3ljmycja\modules\packages\chm.py.basta
C:\tmp3ljmycja\modules\packages\chrome.py.basta
C:\tmp3ljmycja\modules\packages\chromium.py.basta
C:\tmp3ljmycja\modules\packages\cpl.py.basta
C:\tmp3ljmycja\modules\packages\doc.py.basta
C:\tmp3ljmycja\modules\packages\doc2016.py.basta
C:\tmp3ljmycja\modules\packages\doc_antivm.py.basta
C:\tmp3ljmycja\modules\packages\edge.py.basta
C:\tmp3ljmycja\modules\packages\exe.py.basta
C:\tmp3bs9izg4\modules\packages\service.py.basta
C:\tmp3ljmycja\modules\packages\firefox.py.basta
C:\tmp3ljmycja\modules\packages\hta.py.basta
C:\tmp3ljmycja\modules\packages\inf.py.basta
C:\tmp3ljmycja\modules\packages\inp.py.basta
C:\tmp3ljmycja\modules\packages\jar.py.basta
C:\tmp3ljmycja\modules\packages\js.py.basta
C:\tmp3ljmycja\modules\packages\js_antivm.py.basta
C:\tmp3ljmycja\modules\packages\lnk.py.basta
C:\tmp3ljmycja\modules\packages\mht.py.basta
C:\tmp3ljmycja\modules\packages\msbuild.py.basta
C:\tmp3ljmycja\modules\packages\generic.py.basta
C:\tmp3ljmycja\modules\packages\msg.py.basta
C:\tmp3ljmycja\modules\packages\msix.py.basta
C:\tmp3ljmycja\modules\packages\hwp.py.basta
C:\tmp3ljmycja\modules\packages\msi.py.basta
C:\tmp3ljmycja\modules\packages\one.py.basta
C:\tmp3ljmycja\modules\packages\pdf.py.basta
C:\tmp3ljmycja\modules\packages\ppt2016.py.basta
C:\tmp3ljmycja\modules\packages\pub.py.basta
C:\tmp3ljmycja\modules\packages\pub2016.py.basta
C:\tmp3ljmycja\modules\packages\ps1.py.basta
C:\tmp3ljmycja\modules\packages\python.py.basta
C:\tmp3ljmycja\modules\packages\reg.py.basta
C:\tmp3ljmycja\modules\packages\rar.py.basta
C:\tmp3ljmycja\modules\packages\service.py.basta
C:\tmp3ljmycja\modules\packages\sct.py.basta
C:\tmp3ljmycja\modules\packages\service_dll.py.basta
C:\tmp3ljmycja\modules\packages\Shellcode.py.basta
C:\tmp3ljmycja\modules\packages\Shellcode_x64.py.basta
C:\tmp3ljmycja\modules\packages\swf.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_dll.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_js.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_ps1.py.basta
C:\tmp3ljmycja\modules\packages\Unpacker_regsvr.py.basta
C:\tmp3ljmycja\modules\packages\vawtrak.py.basta
C:\tmp3ljmycja\modules\packages\vbs.py.basta
C:\tmp3ljmycja\modules\packages\xls.py.basta
C:\tmp3ljmycja\modules\packages\xps.py.basta
C:\tmp3ljmycja\modules\packages\xslt.py.basta
C:\tmp3bs9izg4\modules\packages\chrome.py.basta
C:\tmp3ljmycja\modules\packages\zip_compound.py.basta
C:\tmp3ljmycja\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\data\yara\AgentTesla.yar.basta
C:\tmpb9ol310j\data\yara\AntiCuckoo.yar.basta
C:\tmp3ljmycja\modules\packages\__init__.py.basta
C:\tmpb9ol310j\data\yara\BumbleBee.yar.basta
C:\tmpb9ol310j\data\yara\capemon.yac.basta
C:\tmp3ljmycja\modules\packages\zip.py.basta
C:\tmpb9ol310j\data\yara\DarkGateLoader.yar.basta
C:\tmpb9ol310j\data\yara\DoomedLoader.yar.basta
C:\tmpb9ol310j\data\yara\DridexLoader.yar.basta
C:\tmpb9ol310j\data\yara\EmotetPacker.yar.basta
C:\tmpb9ol310j\data\yara\Formbook.yar.basta
C:\tmpb9ol310j\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpb9ol310j\data\yara\Latrodectus.yar.basta
C:\tmpb9ol310j\data\yara\MysterySnail.yar.basta
C:\tmpb9ol310j\data\yara\ModiLoader.yar.basta
C:\tmpb9ol310j\data\yara\NSIS.yar.basta
C:\tmpb9ol310j\data\yara\IcedID.yar.basta
C:\tmpb9ol310j\data\yara\Lumma.yar.basta
C:\tmpb9ol310j\data\yara\RdtscpAntiVM.yar.basta
C:\tmpb9ol310j\data\yara\Rhadamanthys.yar.basta
C:\tmpb9ol310j\data\yara\Stealc.yar.basta
C:\tmpb9ol310j\data\yara\Syscall.yar.basta
C:\tmpb9ol310j\data\yara\UPX.yar.basta
C:\tmpb9ol310j\data\yara\UrsnifV3.yar.basta
C:\tmpb9ol310j\data\yara\VBCrypter.yar.basta
C:\tmpb9ol310j\data\yara\XWorm.yar.basta
C:\tmpb9ol310j\data\yara\SmokeLoader.yar.basta
C:\tmpb9ol310j\data\yara\QakBot.yar.basta
C:\tmpb9ol310j\data\yara\RisePro.yar.basta
C:\tmpb9ol310j\lib\api\screenshot.py.basta
C:\tmpb9ol310j\lib\api\__init__.py.basta
C:\tmpb9ol310j\lib\api\utils.py.basta
C:\tmpb9ol310j\lib\common\common.py.basta
C:\tmpb9ol310j\lib\common\constants.py.basta
C:\tmpb9ol310j\lib\api\process.py.basta
C:\tmpb9ol310j\lib\common\abstracts.py.basta
C:\tmpb9ol310j\lib\common\defines.py.basta
C:\tmpb9ol310j\lib\common\exceptions.py.basta
C:\tmpb9ol310j\lib\common\hashing.py.basta
C:\tmpb9ol310j\lib\common\parse_pe.py.basta
C:\tmpb9ol310j\lib\common\rand.py.basta
C:\tmpb9ol310j\lib\common\registry.py.basta
C:\tmpb9ol310j\lib\common\results.py.basta
C:\tmpb9ol310j\lib\common\__init__.py.basta
C:\tmpb9ol310j\lib\core\compound.py.basta
C:\tmpb9ol310j\lib\common\errors.py.basta
C:\tmpb9ol310j\lib\common\zip_utils.py.basta
C:\tmpb9ol310j\lib\core\config.py.basta
C:\tmpb9ol310j\lib\core\log.py.basta
C:\tmpb9ol310j\lib\core\packages.py.basta
C:\tmpb9ol310j\lib\core\pipe.py.basta
C:\tmpb9ol310j\lib\core\__init__.py.basta
C:\tmpb9ol310j\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\privileges.py.basta
C:\tmpb9ol310j\lib\core\startup.py.basta
C:\tmpb9ol310j\modules\auxiliary\amsi_collector.py.basta
C:\tmpb9ol310j\modules\auxiliary\browser.py.basta
C:\tmpb9ol310j\modules\auxiliary\autoruns.py.basta
C:\tmpb9ol310j\modules\auxiliary\curtain.py.basta
C:\tmpb9ol310j\modules\auxiliary\digisig.py.basta
C:\tmpb9ol310j\modules\auxiliary\during_script.py.basta
C:\tmpb9ol310j\modules\auxiliary\disguise.py.basta
C:\tmpb9ol310j\modules\auxiliary\filepickup.py.basta
C:\tmpb9ol310j\modules\auxiliary\evtx.py.basta
C:\tmpb9ol310j\modules\auxiliary\amsi.py.basta
C:\tmpb9ol310j\modules\auxiliary\html_scraper.py.basta
C:\tmpb9ol310j\modules\auxiliary\permissions.py.basta
C:\tmpb9ol310j\modules\auxiliary\pre_script.py.basta
C:\tmpb9ol310j\modules\auxiliary\procmon.py.basta
C:\tmpb9ol310j\modules\auxiliary\recentfiles.py.basta
C:\tmpb9ol310j\modules\auxiliary\screenshots.py.basta
C:\tmpb9ol310j\modules\auxiliary\tlsdump.py.basta
C:\tmpb9ol310j\modules\auxiliary\sysmon.py.basta
C:\tmpb9ol310j\modules\auxiliary\__init__.py.basta
C:\tmpb9ol310j\modules\packages\access.py.basta
C:\tmpb9ol310j\modules\auxiliary\usage.py.basta
C:\tmpb9ol310j\modules\packages\autoit.py.basta
C:\tmpb9ol310j\modules\packages\chm.py.basta
C:\tmpb9ol310j\modules\packages\archive.py.basta
C:\tmpb9ol310j\modules\packages\chrome.py.basta
C:\tmpb9ol310j\modules\packages\chromium.py.basta
C:\tmpb9ol310j\modules\packages\cpl.py.basta
C:\tmpb9ol310j\modules\packages\doc.py.basta
C:\tmpb9ol310j\modules\packages\doc2016.py.basta
C:\tmpb9ol310j\modules\packages\dll.py.basta
C:\tmpb9ol310j\modules\packages\doc_antivm.py.basta
C:\tmpb9ol310j\modules\packages\edge.py.basta
C:\tmpb9ol310j\modules\packages\eml.py.basta
C:\tmpb9ol310j\modules\packages\exe.py.basta
C:\tmpb9ol310j\modules\packages\firefox.py.basta
C:\tmpb9ol310j\modules\packages\hwp.py.basta
C:\tmpb9ol310j\modules\packages\ichitaro.py.basta
C:\tmpb9ol310j\modules\packages\ie.py.basta
C:\tmpb9ol310j\modules\packages\inf.py.basta
C:\tmpb9ol310j\modules\packages\inp.py.basta
C:\tmpb9ol310j\modules\packages\jar.py.basta
C:\tmpb9ol310j\modules\packages\js.py.basta
C:\tmpb9ol310j\modules\packages\js_antivm.py.basta
C:\tmpb9ol310j\modules\packages\lnk.py.basta
C:\tmpb9ol310j\modules\packages\mht.py.basta
C:\tmpb9ol310j\modules\packages\msbuild.py.basta
C:\tmpb9ol310j\modules\packages\msg.py.basta
C:\tmpb9ol310j\modules\packages\msi.py.basta
C:\tmpb9ol310j\modules\packages\msix.py.basta
C:\tmpb9ol310j\modules\packages\nsis.py.basta
C:\tmpb9ol310j\modules\packages\ollydbg.py.basta
C:\tmpb9ol310j\modules\packages\ppt.py.basta
C:\tmpb9ol310j\modules\packages\ppt2016.py.basta
C:\tmpb9ol310j\modules\packages\ps1.py.basta
C:\tmpb9ol310j\modules\packages\pub.py.basta
C:\tmpb9ol310j\modules\packages\pub2016.py.basta
C:\tmpb9ol310j\modules\packages\python.py.basta
C:\tmpb9ol310j\modules\packages\reg.py.basta
C:\tmpb9ol310j\modules\packages\regsvr.py.basta
C:\tmpb9ol310j\modules\packages\rar.py.basta
C:\tmpb9ol310j\modules\packages\sct.py.basta
C:\tmpb9ol310j\modules\packages\service.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpb9ol310j\modules\packages\service_dll.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode.py.basta
C:\tmpb9ol310j\modules\packages\Shellcode_x64.py.basta
C:\tmpb9ol310j\modules\packages\swf.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_dll.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_js.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_ps1.py.basta
C:\tmpb9ol310j\modules\packages\Unpacker_zip.py.basta
C:\tmpb9ol310j\modules\packages\vawtrak.py.basta
C:\tmpb9ol310j\modules\packages\vbejse.py.basta
C:\tmpb9ol310j\modules\packages\vbs.py.basta
C:\tmpb9ol310j\modules\packages\wsf.py.basta
C:\tmpb9ol310j\modules\packages\xls.py.basta
C:\tmpb9ol310j\modules\packages\xls2016.py.basta
C:\tmpb9ol310j\modules\packages\xps.py.basta
C:\tmpb9ol310j\modules\packages\xslt.py.basta
C:\tmpb9ol310j\modules\packages\zip.py.basta
C:\tmp3bs9izg4\modules\packages\python.py.basta
C:\tmpb9ol310j\data\yara\Zloader.yar.basta
C:\tmpb9ol310j\modules\packages\__init__.py.basta
C:\tmpcynaajs6\data\yara\AntiCuckoo.yar.basta
C:\tmpcynaajs6\data\yara\BumbleBee.yar.basta
C:\tmpcynaajs6\data\yara\capemon.yac.basta
C:\tmpcynaajs6\data\yara\CargoBayLoader.yar.basta
C:\tmpcynaajs6\data\yara\DarkGateLoader.yar.basta
C:\tmpcynaajs6\data\yara\DridexLoader.yar.basta
C:\tmpcynaajs6\data\yara\EmotetPacker.yar.basta
C:\tmpcynaajs6\data\yara\Formbook.yar.basta
C:\tmpcynaajs6\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpcynaajs6\data\yara\Guloader.yar.basta
C:\tmpcynaajs6\data\yara\HeavensSyscall.yar.basta
C:\tmpcynaajs6\data\yara\IcedID.yar.basta
C:\tmpcynaajs6\data\yara\Blister.yar.basta
C:\tmpcynaajs6\data\yara\DarkGate.yar.basta
C:\tmpcynaajs6\data\yara\DoomedLoader.yar.basta
C:\tmpcynaajs6\data\yara\Latrodectus.yar.basta
C:\tmp3bs9izg4\modules\packages\chromium.py.basta
C:\tmpcynaajs6\data\yara\Lumma.yar.basta
C:\tmpcynaajs6\data\yara\NSIS.yar.basta
C:\tmpcynaajs6\data\yara\Pafish.yar.basta
C:\tmpcynaajs6\data\yara\Pikabot.yar.basta
C:\tmpcynaajs6\data\yara\QakBot.yar.basta
C:\tmpcynaajs6\data\yara\Rhadamanthys.yar.basta
C:\tmpcynaajs6\data\yara\SingleStepAntiHook.yar.basta
C:\tmpcynaajs6\data\yara\Socks5Systemz.yar.basta
C:\tmpcynaajs6\data\yara\Syscall.yar.basta
C:\tmpcynaajs6\data\yara\RisePro.yar.basta
C:\tmpcynaajs6\data\yara\UrsnifV3.yar.basta
C:\tmpcynaajs6\data\yara\Zloader.yar.basta
C:\tmpcynaajs6\data\yara\XWorm.yar.basta
C:\tmpcynaajs6\lib\api\utils.py.basta
C:\tmpcynaajs6\lib\common\abstracts.py.basta
C:\tmpcynaajs6\lib\common\exceptions.py.basta
C:\tmpcynaajs6\lib\core\compound.py.basta
C:\tmpcynaajs6\lib\common\__init__.py.basta
C:\tmpcynaajs6\lib\common\hashing.py.basta
C:\tmpcynaajs6\lib\common\zip_utils.py.basta
C:\tmpcynaajs6\lib\common\results.py.basta
C:\tmpcynaajs6\lib\core\privileges.py.basta
C:\tmpcynaajs6\lib\core\packages.py.basta
C:\tmpcynaajs6\lib\core\config.py.basta
C:\tmpcynaajs6\lib\core\log.py.basta
C:\tmpcynaajs6\modules\auxiliary\autoruns.py.basta
C:\tmpcynaajs6\modules\auxiliary\browser.py.basta
C:\tmpcynaajs6\modules\auxiliary\during_script.py.basta
C:\tmpcynaajs6\modules\auxiliary\amsi.py.basta
C:\tmpcynaajs6\modules\auxiliary\digisig.py.basta
C:\tmpcynaajs6\modules\auxiliary\html_scraper.py.basta
C:\tmpcynaajs6\modules\auxiliary\human.py.basta
C:\tmpcynaajs6\modules\auxiliary\disguise.py.basta
C:\tmpcynaajs6\modules\auxiliary\pre_script.py.basta
C:\tmpcynaajs6\modules\auxiliary\filepickup.py.basta
C:\tmpcynaajs6\modules\auxiliary\permissions.py.basta
C:\tmpcynaajs6\modules\auxiliary\recentfiles.py.basta
C:\tmpcynaajs6\modules\auxiliary\procmon.py.basta
C:\tmpcynaajs6\modules\auxiliary\evtx.py.basta
C:\tmpcynaajs6\modules\auxiliary\sysmon.py.basta
C:\tmpcynaajs6\modules\packages\access.py.basta
C:\tmpcynaajs6\modules\packages\archive.py.basta
C:\tmpcynaajs6\modules\packages\chrome.py.basta
C:\tmpcynaajs6\modules\packages\applet.py.basta
C:\tmpcynaajs6\modules\packages\chm.py.basta
C:\tmpcynaajs6\modules\packages\chromium.py.basta
C:\tmpcynaajs6\modules\packages\doc.py.basta
C:\tmpcynaajs6\modules\packages\cpl.py.basta
C:\tmpcynaajs6\modules\packages\doc2016.py.basta
C:\tmpcynaajs6\modules\packages\eml.py.basta
C:\tmpcynaajs6\modules\packages\exe.py.basta
C:\tmpcynaajs6\modules\packages\firefox.py.basta
C:\tmpcynaajs6\modules\packages\hta.py.basta
C:\tmpcynaajs6\modules\packages\ichitaro.py.basta
C:\tmpcynaajs6\modules\packages\ie.py.basta
C:\tmpcynaajs6\modules\packages\inf.py.basta
C:\tmpcynaajs6\modules\packages\inp.py.basta
C:\tmpcynaajs6\modules\packages\jar.py.basta
C:\tmpcynaajs6\modules\packages\js.py.basta
C:\tmpcynaajs6\modules\packages\js_antivm.py.basta
C:\tmpcynaajs6\modules\packages\lnk.py.basta
C:\tmpcynaajs6\modules\packages\mht.py.basta
C:\tmpcynaajs6\modules\auxiliary\amsi_collector.py.basta
C:\tmpcynaajs6\modules\packages\dll.py.basta
C:\tmpcynaajs6\modules\packages\wsf.py.basta
C:\tmpcynaajs6\modules\packages\vbejse.py.basta
C:\tmpcynaajs6\modules\packages\msix.py.basta
C:\tmpcynaajs6\modules\packages\doc_antivm.py.basta
C:\tmpcynaajs6\modules\packages\edge.py.basta
C:\tmpcynaajs6\modules\packages\xslt.py.basta
C:\tmpcynaajs6\modules\packages\zip_compound.py.basta
C:\tmpcynaajs6\modules\packages\zip.py.basta
C:\tmpcynaajs6\modules\packages\xps.py.basta
C:\tmpcynaajs6\modules\packages\__init__.py.basta
C:\tmpcynaajs6\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\data\yara\AgentTesla.yar.basta
C:\tmpd5tr1_rv\data\yara\Al-khaser.yar.basta
C:\tmpd5tr1_rv\data\yara\AntiCuckoo.yar.basta
C:\tmpd5tr1_rv\data\yara\Blister.yar.basta
C:\tmpd5tr1_rv\data\yara\BuerLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\BumbleBee.yar.basta
C:\tmpd5tr1_rv\data\yara\CargoBayLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\DarkGate.yar.basta
C:\tmpd5tr1_rv\data\yara\DarkGateLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\DoomedLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\DridexLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\EmotetPacker.yar.basta
C:\tmpd5tr1_rv\data\yara\HeavensSyscall.yar.basta
C:\tmpd5tr1_rv\data\yara\Guloader.yar.basta
C:\tmpd5tr1_rv\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpd5tr1_rv\data\yara\Lumma.yar.basta
C:\tmpd5tr1_rv\data\yara\Latrodectus.yar.basta
C:\tmpd5tr1_rv\data\yara\MysterySnail.yar.basta
C:\tmpd5tr1_rv\data\yara\RdtscpAntiVM.yar.basta
C:\tmpd5tr1_rv\data\yara\SmokeLoader.yar.basta
C:\tmpd5tr1_rv\data\yara\Pafish.yar.basta
C:\tmpd5tr1_rv\data\yara\Stealc.yar.basta
C:\tmpd5tr1_rv\data\yara\VBCrypter.yar.basta
C:\tmpd5tr1_rv\data\yara\UrsnifV3.yar.basta
C:\tmpd5tr1_rv\data\yara\XWorm.yar.basta
C:\tmpd5tr1_rv\lib\api\screenshot.py.basta
C:\tmpd5tr1_rv\lib\api\utils.py.basta
C:\tmpd5tr1_rv\lib\api\__init__.py.basta
C:\tmpd5tr1_rv\lib\api\process.py.basta
C:\tmpd5tr1_rv\lib\common\abstracts.py.basta
C:\tmpd5tr1_rv\lib\common\common.py.basta
C:\tmpd5tr1_rv\lib\common\constants.py.basta
C:\tmpd5tr1_rv\lib\common\defines.py.basta
C:\tmpd5tr1_rv\lib\common\errors.py.basta
C:\tmpd5tr1_rv\lib\common\exceptions.py.basta
C:\tmpd5tr1_rv\lib\common\hashing.py.basta
C:\tmpd5tr1_rv\lib\common\parse_pe.py.basta
C:\tmpd5tr1_rv\lib\common\rand.py.basta
C:\tmpd5tr1_rv\lib\common\registry.py.basta
C:\tmpd5tr1_rv\lib\common\results.py.basta
C:\tmpd5tr1_rv\lib\common\zip_utils.py.basta
C:\tmpd5tr1_rv\lib\common\__init__.py.basta
C:\tmpd5tr1_rv\lib\core\compound.py.basta
C:\tmpd5tr1_rv\lib\core\config.py.basta
C:\tmpd5tr1_rv\lib\core\log.py.basta
C:\tmpd5tr1_rv\lib\core\packages.py.basta
C:\tmpd5tr1_rv\lib\core\pipe.py.basta
C:\tmpd5tr1_rv\lib\core\privileges.py.basta
C:\tmpd5tr1_rv\lib\core\startup.py.basta
C:\tmpd5tr1_rv\lib\core\__init__.py.basta
C:\tmpd5tr1_rv\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\amsi.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\amsi_collector.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\autoruns.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\browser.py.basta
C:\tmpd5tr1_rv\data\yara\Syscall.yar.basta
C:\tmpd5tr1_rv\modules\auxiliary\disguise.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\evtx.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\filepickup.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\html_scraper.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\human.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\permissions.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\pre_script.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\procmon.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\recentfiles.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\screenshots.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\sysmon.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\during_script.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\tlsdump.py.basta
C:\tmpd5tr1_rv\modules\auxiliary\__init__.py.basta
C:\tmpd5tr1_rv\modules\packages\autoit.py.basta
C:\tmpd5tr1_rv\modules\packages\archive.py.basta
C:\tmpd5tr1_rv\modules\packages\chm.py.basta
C:\tmpd5tr1_rv\modules\packages\cpl.py.basta
C:\tmpd5tr1_rv\modules\packages\doc_antivm.py.basta
C:\tmpd5tr1_rv\modules\packages\ichitaro.py.basta
C:\tmpd5tr1_rv\modules\packages\ie.py.basta
C:\tmpd5tr1_rv\modules\packages\hta.py.basta
C:\tmpd5tr1_rv\modules\packages\inp.py.basta
C:\tmpd5tr1_rv\modules\packages\js.py.basta
C:\tmpd5tr1_rv\modules\packages\lnk.py.basta
C:\tmpd5tr1_rv\modules\packages\jar.py.basta
C:\tmpd5tr1_rv\modules\packages\msbuild.py.basta
C:\tmpd5tr1_rv\modules\packages\js_antivm.py.basta
C:\tmpd5tr1_rv\modules\packages\msi.py.basta
C:\tmpd5tr1_rv\modules\packages\msg.py.basta
C:\tmpd5tr1_rv\modules\packages\nsis.py.basta
C:\tmpd5tr1_rv\modules\packages\ollydbg.py.basta
C:\tmpd5tr1_rv\modules\packages\ps1.py.basta
C:\tmpd5tr1_rv\modules\packages\pub.py.basta
C:\tmpd5tr1_rv\modules\packages\reg.py.basta
C:\tmpd5tr1_rv\modules\packages\rar.py.basta
C:\tmpd5tr1_rv\modules\packages\regsvr.py.basta
C:\tmpd5tr1_rv\modules\packages\sct.py.basta
C:\tmpd5tr1_rv\modules\packages\service.py.basta
C:\tmpd5tr1_rv\modules\packages\service_dll.py.basta
C:\tmpd5tr1_rv\modules\packages\Unpacker_dll.py.basta
C:\tmpd5tr1_rv\modules\packages\swf.py.basta
C:\tmpd5tr1_rv\modules\packages\Unpacker.py.basta
C:\tmpd5tr1_rv\modules\packages\vbs.py.basta
C:\tmpd5tr1_rv\modules\packages\xls2016.py.basta
C:\tmpd5tr1_rv\modules\packages\xps.py.basta
C:\tmpeoix3ml5\data\yara\AgentTesla.yar.basta
C:\tmpd5tr1_rv\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\data\yara\Al-khaser.yar.basta
C:\tmpeoix3ml5\data\yara\BuerLoader.yar.basta
C:\tmpeoix3ml5\data\yara\DarkGateLoader.yar.basta
C:\tmpeoix3ml5\data\yara\DarkGate.yar.basta
C:\tmpeoix3ml5\data\yara\capemon.yac.basta
C:\tmpeoix3ml5\data\yara\DridexLoader.yar.basta
C:\tmpeoix3ml5\data\yara\Latrodectus.yar.basta
C:\tmpeoix3ml5\data\yara\IcedID.yar.basta
C:\tmpeoix3ml5\data\yara\Lumma.yar.basta
C:\tmpeoix3ml5\data\yara\Guloader.yar.basta
C:\tmpeoix3ml5\data\yara\MysterySnail.yar.basta
C:\tmpeoix3ml5\data\yara\Pafish.yar.basta
C:\tmpeoix3ml5\data\yara\Rhadamanthys.yar.basta
C:\tmpeoix3ml5\data\yara\RdtscpAntiVM.yar.basta
C:\tmpeoix3ml5\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpeoix3ml5\data\yara\Zloader.yar.basta
C:\tmpeoix3ml5\lib\api\screenshot.py.basta
C:\tmpeoix3ml5\lib\api\__init__.py.basta
C:\tmpeoix3ml5\lib\api\process.py.basta
C:\tmpeoix3ml5\lib\common\defines.py.basta
C:\tmpeoix3ml5\lib\common\rand.py.basta
C:\tmpeoix3ml5\lib\core\compound.py.basta
C:\tmpeoix3ml5\lib\common\__init__.py.basta
C:\tmpeoix3ml5\lib\common\registry.py.basta
C:\tmpeoix3ml5\lib\common\zip_utils.py.basta
C:\tmpeoix3ml5\lib\core\log.py.basta
C:\tmpeoix3ml5\lib\core\config.py.basta
C:\tmpeoix3ml5\lib\core\packages.py.basta
C:\tmpeoix3ml5\lib\core\startup.py.basta
C:\tmpeoix3ml5\lib\core\pipe.py.basta
C:\tmpeoix3ml5\lib\core\__init__.py.basta
C:\tmpeoix3ml5\modules\auxiliary\disguise.py.basta
C:\tmpeoix3ml5\modules\auxiliary\filepickup.py.basta
C:\tmpeoix3ml5\modules\auxiliary\screenshots.py.basta
C:\tmpeoix3ml5\modules\auxiliary\procmon.py.basta
C:\tmpeoix3ml5\modules\auxiliary\sysmon.py.basta
C:\tmpeoix3ml5\modules\packages\applet.py.basta
C:\tmpeoix3ml5\modules\packages\autoit.py.basta
C:\tmpeoix3ml5\modules\packages\archive.py.basta
C:\tmpeoix3ml5\modules\packages\chrome.py.basta
C:\tmpeoix3ml5\modules\packages\chm.py.basta
C:\tmpeoix3ml5\modules\packages\edge.py.basta
C:\tmpeoix3ml5\modules\packages\dll.py.basta
C:\tmpeoix3ml5\modules\packages\exe.py.basta
C:\tmpeoix3ml5\modules\packages\eml.py.basta
C:\tmpeoix3ml5\modules\packages\doc.py.basta
C:\tmpeoix3ml5\modules\packages\hta.py.basta
C:\tmpeoix3ml5\modules\packages\hwp.py.basta
C:\tmpeoix3ml5\modules\packages\mht.py.basta
C:\tmpeoix3ml5\modules\packages\inf.py.basta
C:\tmpeoix3ml5\modules\packages\msi.py.basta
C:\tmpeoix3ml5\modules\packages\nsis.py.basta
C:\tmpeoix3ml5\modules\packages\pdf.py.basta
C:\tmpeoix3ml5\modules\packages\ppt.py.basta
C:\tmpeoix3ml5\modules\packages\ppt2016.py.basta
C:\tmpeoix3ml5\modules\packages\ps1.py.basta
C:\tmpeoix3ml5\modules\packages\pub.py.basta
C:\tmpeoix3ml5\modules\packages\pub2016.py.basta
C:\tmpeoix3ml5\modules\packages\reg.py.basta
C:\tmpeoix3ml5\modules\packages\service_dll.py.basta
C:\tmpeoix3ml5\modules\packages\sct.py.basta
C:\tmpeoix3ml5\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpeoix3ml5\modules\packages\service.py.basta
C:\tmpeoix3ml5\modules\packages\swf.py.basta
C:\tmpeoix3ml5\modules\packages\firefox.py.basta
C:\tmpeoix3ml5\modules\packages\Unpacker_regsvr.py.basta
C:\tmpeoix3ml5\modules\packages\vbs.py.basta
C:\tmpeoix3ml5\modules\packages\wsf.py.basta
C:\tmpeoix3ml5\modules\packages\xls.py.basta
C:\tmpeoix3ml5\modules\packages\xls2016.py.basta
C:\tmpeoix3ml5\modules\packages\xps.py.basta
C:\tmpeoix3ml5\modules\packages\xslt.py.basta
C:\tmpeoix3ml5\modules\packages\zip.py.basta
C:\tmpeoix3ml5\modules\packages\zip_compound.py.basta
C:\tmpeoix3ml5\modules\packages\__init__.py.basta
C:\tmph_w19omx\data\yara\AgentTesla.yar.basta
C:\tmph_w19omx\data\yara\Al-khaser.yar.basta
C:\tmph_w19omx\data\yara\AntiCuckoo.yar.basta
C:\tmph_w19omx\data\yara\Blister.yar.basta
C:\tmph_w19omx\data\yara\BuerLoader.yar.basta
C:\tmph_w19omx\data\yara\BumbleBee.yar.basta
C:\tmph_w19omx\data\yara\CargoBayLoader.yar.basta
C:\tmph_w19omx\data\yara\DarkGate.yar.basta
C:\tmph_w19omx\data\yara\DarkGateLoader.yar.basta
C:\tmph_w19omx\data\yara\DoomedLoader.yar.basta
C:\tmph_w19omx\data\yara\DridexLoader.yar.basta
C:\tmph_w19omx\data\yara\EmotetPacker.yar.basta
C:\tmph_w19omx\data\yara\Formbook.yar.basta
C:\tmph_w19omx\data\yara\GetTickCountAntiVM.yar.basta
C:\tmph_w19omx\data\yara\Guloader.yar.basta
C:\tmph_w19omx\data\yara\capemon.yac.basta
C:\tmph_w19omx\data\yara\HeavensSyscall.yar.basta
C:\tmph_w19omx\data\yara\Latrodectus.yar.basta
C:\tmph_w19omx\data\yara\Lumma.yar.basta
C:\tmph_w19omx\data\yara\ModiLoader.yar.basta
C:\tmph_w19omx\data\yara\MysterySnail.yar.basta
C:\tmph_w19omx\data\yara\IcedID.yar.basta
C:\tmph_w19omx\data\yara\Pafish.yar.basta
C:\tmph_w19omx\data\yara\QakBot.yar.basta
C:\tmph_w19omx\data\yara\RdtscpAntiVM.yar.basta
C:\tmph_w19omx\data\yara\RisePro.yar.basta
C:\tmph_w19omx\data\yara\SmokeLoader.yar.basta
C:\tmph_w19omx\data\yara\Socks5Systemz.yar.basta
C:\tmph_w19omx\data\yara\Stealc.yar.basta
C:\tmpeoix3ml5\modules\packages\Unpacker.py.basta
C:\tmpeoix3ml5\modules\packages\Unpacker_dll.py.basta
C:\tmpeoix3ml5\modules\packages\vbejse.py.basta
C:\tmph_w19omx\data\yara\UrsnifV3.yar.basta
C:\tmph_w19omx\data\yara\VBCrypter.yar.basta
C:\tmph_w19omx\data\yara\XWorm.yar.basta
C:\tmph_w19omx\data\yara\Zloader.yar.basta
C:\tmph_w19omx\lib\api\utils.py.basta
C:\tmph_w19omx\lib\api\screenshot.py.basta
C:\tmph_w19omx\data\yara\UPX.yar.basta
C:\tmpeoix3ml5\modules\packages\Unpacker_js.py.basta
C:\tmph_w19omx\lib\common\abstracts.py.basta
C:\tmph_w19omx\lib\common\common.py.basta
C:\tmph_w19omx\data\yara\Syscall.yar.basta
C:\tmph_w19omx\lib\common\constants.py.basta
C:\tmph_w19omx\lib\common\exceptions.py.basta
C:\tmph_w19omx\lib\common\hashing.py.basta
C:\tmph_w19omx\lib\common\defines.py.basta
C:\tmph_w19omx\lib\common\zip_utils.py.basta
C:\tmph_w19omx\lib\common\rand.py.basta
C:\tmph_w19omx\lib\core\log.py.basta
C:\tmph_w19omx\lib\core\privileges.py.basta
C:\tmph_w19omx\lib\core\packages.py.basta
C:\tmph_w19omx\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\modules\auxiliary\amsi_collector.py.basta
C:\tmph_w19omx\lib\core\pipe.py.basta
C:\tmph_w19omx\modules\auxiliary\autoruns.py.basta
C:\tmph_w19omx\modules\auxiliary\curtain.py.basta
C:\tmph_w19omx\modules\auxiliary\browser.py.basta
C:\tmph_w19omx\modules\auxiliary\digisig.py.basta
C:\tmph_w19omx\modules\auxiliary\recentfiles.py.basta
C:\tmph_w19omx\modules\auxiliary\evtx.py.basta
C:\tmph_w19omx\modules\auxiliary\screenshots.py.basta
C:\tmph_w19omx\modules\auxiliary\__init__.py.basta
C:\tmph_w19omx\modules\packages\access.py.basta
C:\tmph_w19omx\modules\packages\archive.py.basta
C:\tmph_w19omx\modules\packages\autoit.py.basta
C:\tmph_w19omx\modules\packages\chm.py.basta
C:\tmph_w19omx\modules\packages\chromium.py.basta
C:\tmph_w19omx\modules\packages\cpl.py.basta
C:\tmph_w19omx\modules\packages\doc.py.basta
C:\tmph_w19omx\modules\packages\doc2016.py.basta
C:\tmph_w19omx\modules\packages\doc_antivm.py.basta
C:\tmph_w19omx\modules\packages\dll.py.basta
C:\tmph_w19omx\modules\packages\firefox.py.basta
C:\tmph_w19omx\modules\packages\generic.py.basta
C:\tmph_w19omx\modules\packages\hta.py.basta
C:\tmph_w19omx\modules\packages\ie.py.basta
C:\tmph_w19omx\modules\packages\inf.py.basta
C:\tmph_w19omx\modules\packages\inp.py.basta
C:\tmph_w19omx\modules\packages\jar.py.basta
C:\tmph_w19omx\modules\packages\js.py.basta
C:\tmph_w19omx\modules\packages\lnk.py.basta
C:\tmph_w19omx\modules\packages\mht.py.basta
C:\tmph_w19omx\modules\packages\msg.py.basta
C:\tmph_w19omx\modules\packages\msbuild.py.basta
C:\tmph_w19omx\modules\packages\pub2016.py.basta
C:\tmph_w19omx\modules\packages\python.py.basta
C:\tmph_w19omx\modules\packages\rar.py.basta
C:\tmph_w19omx\modules\packages\reg.py.basta
C:\tmph_w19omx\modules\packages\Shellcode-Unpacker.py.basta
C:\tmph_w19omx\modules\packages\service_dll.py.basta
C:\tmph_w19omx\modules\packages\service.py.basta
C:\tmph_w19omx\modules\packages\Shellcode.py.basta
C:\tmph_w19omx\modules\packages\Shellcode_x64.py.basta
C:\tmph_w19omx\modules\packages\Unpacker.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_dll.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_js.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_ps1.py.basta
C:\tmph_w19omx\modules\packages\Unpacker_zip.py.basta
C:\tmph_w19omx\modules\packages\vawtrak.py.basta
C:\tmph_w19omx\modules\packages\vbs.py.basta
C:\tmph_w19omx\modules\packages\xls.py.basta
C:\tmph_w19omx\modules\packages\xslt.py.basta
C:\tmph_w19omx\modules\packages\zip.py.basta
C:\tmph_w19omx\modules\packages\__init__.py.basta
C:\tmph_w19omx\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpsv59hb03\data\yara\AgentTesla.yar.basta
C:\tmpsv59hb03\data\yara\AntiCuckoo.yar.basta
C:\tmpsv59hb03\data\yara\BuerLoader.yar.basta
C:\tmpsv59hb03\data\yara\Blister.yar.basta
C:\tmpsv59hb03\data\yara\BumbleBee.yar.basta
C:\tmpsv59hb03\data\yara\CargoBayLoader.yar.basta
C:\tmpsv59hb03\data\yara\DarkGateLoader.yar.basta
C:\tmpsv59hb03\data\yara\DarkGate.yar.basta
C:\tmpsv59hb03\data\yara\DoomedLoader.yar.basta
C:\tmpsv59hb03\data\yara\Formbook.yar.basta
C:\tmpsv59hb03\data\yara\Guloader.yar.basta
C:\tmpsv59hb03\data\yara\HeavensSyscall.yar.basta
C:\tmpsv59hb03\data\yara\IcedID.yar.basta
C:\tmpsv59hb03\data\yara\Latrodectus.yar.basta
C:\tmpsv59hb03\data\yara\MysterySnail.yar.basta
C:\tmpsv59hb03\data\yara\NSIS.yar.basta
C:\tmpsv59hb03\data\yara\Pikabot.yar.basta
C:\tmpsv59hb03\data\yara\QakBot.yar.basta
C:\tmpsv59hb03\data\yara\RisePro.yar.basta
C:\tmpsv59hb03\data\yara\SingleStepAntiHook.yar.basta
C:\tmpsv59hb03\data\yara\Socks5Systemz.yar.basta
C:\tmpsv59hb03\data\yara\Stealc.yar.basta
C:\tmpsv59hb03\data\yara\UPX.yar.basta
C:\tmpsv59hb03\data\yara\UrsnifV3.yar.basta
C:\tmpsv59hb03\data\yara\XWorm.yar.basta
C:\tmpsv59hb03\data\yara\Zloader.yar.basta
C:\tmpsv59hb03\lib\api\screenshot.py.basta
C:\tmpsv59hb03\lib\api\utils.py.basta
C:\tmpsv59hb03\lib\api\__init__.py.basta
C:\tmpsv59hb03\lib\api\process.py.basta
C:\tmpsv59hb03\lib\common\common.py.basta
C:\tmpsv59hb03\lib\common\abstracts.py.basta
C:\tmpsv59hb03\lib\common\constants.py.basta
C:\tmpsv59hb03\lib\common\exceptions.py.basta
C:\tmpsv59hb03\lib\common\hashing.py.basta
C:\tmpsv59hb03\lib\common\errors.py.basta
C:\tmpsv59hb03\lib\common\rand.py.basta
C:\tmpsv59hb03\lib\common\registry.py.basta
C:\tmpsv59hb03\lib\common\results.py.basta
C:\tmpsv59hb03\lib\common\__init__.py.basta
C:\tmpsv59hb03\lib\core\compound.py.basta
C:\tmpsv59hb03\lib\common\zip_utils.py.basta
C:\tmpsv59hb03\lib\core\config.py.basta
C:\tmpsv59hb03\lib\core\log.py.basta
C:\tmpsv59hb03\lib\core\packages.py.basta
C:\tmpsv59hb03\lib\core\privileges.py.basta
C:\tmpsv59hb03\lib\core\pipe.py.basta
C:\tmpsv59hb03\lib\core\__init__.py.basta
C:\tmpsv59hb03\lib\core\startup.py.basta
C:\tmpsv59hb03\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpsv59hb03\modules\auxiliary\amsi_collector.py.basta
C:\tmpsv59hb03\modules\auxiliary\autoruns.py.basta
C:\tmpsv59hb03\modules\auxiliary\browser.py.basta
C:\tmpsv59hb03\modules\auxiliary\curtain.py.basta
C:\tmpsv59hb03\modules\auxiliary\digisig.py.basta
C:\tmpsv59hb03\modules\auxiliary\amsi.py.basta
C:\tmpsv59hb03\modules\auxiliary\disguise.py.basta
C:\tmpsv59hb03\modules\auxiliary\during_script.py.basta
C:\tmpsv59hb03\modules\auxiliary\filepickup.py.basta
C:\tmpsv59hb03\modules\auxiliary\evtx.py.basta
C:\tmpsv59hb03\modules\auxiliary\html_scraper.py.basta
C:\tmpsv59hb03\modules\auxiliary\permissions.py.basta
C:\tmpsv59hb03\modules\auxiliary\human.py.basta
C:\tmpsv59hb03\modules\auxiliary\pre_script.py.basta
C:\tmpsv59hb03\modules\auxiliary\procmon.py.basta
C:\tmpsv59hb03\modules\auxiliary\recentfiles.py.basta
C:\tmpsv59hb03\modules\auxiliary\screenshots.py.basta
C:\tmpsv59hb03\modules\auxiliary\sysmon.py.basta
C:\tmpsv59hb03\modules\auxiliary\tlsdump.py.basta
C:\tmpsv59hb03\modules\auxiliary\__init__.py.basta
C:\tmpsv59hb03\modules\auxiliary\usage.py.basta
C:\tmpsv59hb03\modules\packages\access.py.basta
C:\tmpsv59hb03\modules\packages\applet.py.basta
C:\tmpsv59hb03\modules\packages\autoit.py.basta
C:\tmpsv59hb03\modules\packages\chm.py.basta
C:\tmpsv59hb03\modules\packages\chrome.py.basta
C:\tmpsv59hb03\modules\packages\chromium.py.basta
C:\tmpsv59hb03\modules\packages\cpl.py.basta
C:\tmpsv59hb03\modules\packages\doc.py.basta
C:\tmpsv59hb03\modules\packages\doc2016.py.basta
C:\tmpsv59hb03\modules\packages\edge.py.basta
C:\tmpsv59hb03\modules\packages\exe.py.basta
C:\tmpsv59hb03\modules\packages\firefox.py.basta
C:\tmpsv59hb03\modules\packages\generic.py.basta
C:\tmpsv59hb03\modules\packages\hta.py.basta
C:\tmpsv59hb03\modules\packages\hwp.py.basta
C:\tmpsv59hb03\modules\packages\ichitaro.py.basta
C:\tmpsv59hb03\modules\packages\ie.py.basta
C:\tmpsv59hb03\modules\packages\inf.py.basta
C:\tmpsv59hb03\modules\packages\jar.py.basta
C:\tmpsv59hb03\modules\packages\js_antivm.py.basta
C:\tmpsv59hb03\modules\packages\lnk.py.basta
C:\tmpsv59hb03\modules\packages\mht.py.basta
C:\tmpsv59hb03\modules\packages\msbuild.py.basta
C:\tmpsv59hb03\modules\packages\msg.py.basta
C:\tmpsv59hb03\modules\packages\msi.py.basta
C:\tmpsv59hb03\modules\packages\msix.py.basta
C:\tmpsv59hb03\modules\packages\nsis.py.basta
C:\tmpsv59hb03\modules\packages\one.py.basta
C:\tmpsv59hb03\modules\packages\pdf.py.basta
C:\tmpsv59hb03\modules\packages\ppt.py.basta
C:\tmpsv59hb03\modules\packages\ppt2016.py.basta
C:\tmpsv59hb03\modules\packages\ps1.py.basta
C:\tmpsv59hb03\modules\packages\pub.py.basta
C:\tmpsv59hb03\modules\packages\pub2016.py.basta
C:\tmpsv59hb03\modules\packages\python.py.basta
C:\tmpsv59hb03\modules\packages\rar.py.basta
C:\tmpsv59hb03\modules\packages\reg.py.basta
C:\tmpsv59hb03\modules\packages\regsvr.py.basta
C:\tmpsv59hb03\modules\packages\sct.py.basta
C:\tmph_w19omx\modules\packages\eml.py.basta
C:\tmph_w19omx\modules\packages\msix.py.basta
C:\tmpsv59hb03\modules\packages\service.py.basta
C:\tmpsv59hb03\modules\packages\service_dll.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode_x64.py.basta
C:\tmpsv59hb03\modules\packages\swf.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_dll.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_ps1.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_js.py.basta
C:\tmpsv59hb03\modules\packages\vawtrak.py.basta
C:\tmpsv59hb03\modules\packages\Unpacker_zip.py.basta
C:\tmpsv59hb03\modules\packages\wsf.py.basta
C:\tmpsv59hb03\modules\packages\xls.py.basta
C:\tmpsv59hb03\modules\packages\xslt.py.basta
C:\tmpsv59hb03\modules\packages\__init__.py.basta
C:\tmpsv59hb03\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpugscyilj\data\yara\AgentTesla.yar.basta
C:\tmpsv59hb03\modules\packages\zip_compound.py.basta
C:\tmpsv59hb03\modules\packages\zip.py.basta
C:\tmpugscyilj\data\yara\AntiCuckoo.yar.basta
C:\tmpugscyilj\data\yara\Blister.yar.basta
C:\tmpugscyilj\data\yara\BumbleBee.yar.basta
C:\tmpugscyilj\data\yara\BuerLoader.yar.basta
C:\tmpugscyilj\data\yara\CargoBayLoader.yar.basta
C:\tmpugscyilj\data\yara\DarkGate.yar.basta
C:\tmpugscyilj\data\yara\DarkGateLoader.yar.basta
C:\tmph_w19omx\modules\packages\xps.py.basta
C:\tmpsv59hb03\lib\common\parse_pe.py.basta
C:\tmpugscyilj\data\yara\DoomedLoader.yar.basta
C:\tmpugscyilj\data\yara\capemon.yac.basta
C:\tmpugscyilj\data\yara\Formbook.yar.basta
C:\tmpugscyilj\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpugscyilj\data\yara\Guloader.yar.basta
C:\tmpugscyilj\data\yara\HeavensSyscall.yar.basta
C:\tmpugscyilj\data\yara\IcedID.yar.basta
C:\tmpugscyilj\data\yara\Lumma.yar.basta
C:\tmpugscyilj\data\yara\MysterySnail.yar.basta
C:\tmpugscyilj\data\yara\NSIS.yar.basta
C:\tmpugscyilj\data\yara\Pafish.yar.basta
C:\tmpugscyilj\data\yara\Pikabot.yar.basta
C:\tmpugscyilj\data\yara\RdtscpAntiVM.yar.basta
C:\tmpugscyilj\data\yara\Rhadamanthys.yar.basta
C:\tmpugscyilj\data\yara\QakBot.yar.basta
C:\tmpugscyilj\data\yara\RisePro.yar.basta
C:\tmpugscyilj\data\yara\Stealc.yar.basta
C:\tmpugscyilj\data\yara\Socks5Systemz.yar.basta
C:\tmpugscyilj\data\yara\Syscall.yar.basta
C:\tmpugscyilj\data\yara\SingleStepAntiHook.yar.basta
C:\tmpugscyilj\data\yara\UrsnifV3.yar.basta
C:\tmpugscyilj\data\yara\VBCrypter.yar.basta
C:\tmpugscyilj\data\yara\SmokeLoader.yar.basta
C:\tmpugscyilj\data\yara\Zloader.yar.basta
C:\tmpugscyilj\data\yara\XWorm.yar.basta
C:\tmpugscyilj\lib\api\screenshot.py.basta
C:\tmpugscyilj\lib\api\__init__.py.basta
C:\tmpugscyilj\lib\api\utils.py.basta
C:\tmpugscyilj\lib\api\process.py.basta
C:\tmpugscyilj\lib\common\constants.py.basta
C:\tmpugscyilj\lib\common\defines.py.basta
C:\tmpugscyilj\lib\common\exceptions.py.basta
C:\tmpugscyilj\lib\common\hashing.py.basta
C:\tmpugscyilj\lib\common\parse_pe.py.basta
C:\tmpugscyilj\lib\common\errors.py.basta
C:\tmpugscyilj\lib\common\rand.py.basta
C:\tmpugscyilj\lib\common\registry.py.basta
C:\tmpugscyilj\lib\common\results.py.basta
C:\tmpugscyilj\lib\core\compound.py.basta
C:\tmpugscyilj\lib\common\__init__.py.basta
C:\tmpugscyilj\lib\common\zip_utils.py.basta
C:\tmpugscyilj\lib\core\config.py.basta
C:\tmpugscyilj\lib\core\log.py.basta
C:\tmpugscyilj\lib\core\privileges.py.basta
C:\tmpugscyilj\lib\core\pipe.py.basta
C:\tmpugscyilj\lib\core\packages.py.basta
C:\tmpugscyilj\lib\core\__init__.py.basta
C:\tmpugscyilj\lib\core\startup.py.basta
C:\tmpugscyilj\modules\auxiliary\amsi_collector.py.basta
C:\tmpugscyilj\modules\auxiliary\autoruns.py.basta
C:\tmpugscyilj\modules\auxiliary\browser.py.basta
C:\tmpugscyilj\modules\auxiliary\curtain.py.basta
C:\tmpugscyilj\modules\auxiliary\digisig.py.basta
C:\tmpugscyilj\modules\auxiliary\during_script.py.basta
C:\tmpugscyilj\modules\auxiliary\disguise.py.basta
C:\tmpugscyilj\modules\auxiliary\amsi.py.basta
C:\tmpugscyilj\modules\auxiliary\evtx.py.basta
C:\tmpsv59hb03\modules\packages\Shellcode-Unpacker.py.basta
C:\tmpugscyilj\data\yara\EmotetPacker.yar.basta
C:\tmpugscyilj\modules\auxiliary\human.py.basta
C:\tmpugscyilj\modules\auxiliary\permissions.py.basta
C:\tmpugscyilj\modules\auxiliary\recentfiles.py.basta
C:\tmpugscyilj\modules\auxiliary\screenshots.py.basta
C:\tmpugscyilj\modules\auxiliary\sysmon.py.basta
C:\tmpugscyilj\modules\auxiliary\tlsdump.py.basta
C:\tmpugscyilj\modules\auxiliary\procmon.py.basta
C:\tmpugscyilj\modules\packages\access.py.basta
C:\tmpugscyilj\modules\auxiliary\__init__.py.basta
C:\tmpugscyilj\modules\auxiliary\usage.py.basta
C:\tmpugscyilj\modules\packages\applet.py.basta
C:\tmpugscyilj\modules\packages\pdf.py.basta
C:\tmpugscyilj\modules\packages\one.py.basta
C:\tmpugscyilj\modules\packages\ppt.py.basta
C:\tmpugscyilj\modules\packages\ps1.py.basta
C:\tmpugscyilj\modules\packages\rar.py.basta
C:\tmpugscyilj\modules\packages\reg.py.basta
C:\tmpugscyilj\modules\packages\autoit.py.basta
C:\tmpugscyilj\modules\packages\service.py.basta
C:\tmpugscyilj\modules\packages\service_dll.py.basta
C:\tmpugscyilj\modules\packages\Shellcode.py.basta
C:\tmpugscyilj\modules\packages\swf.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_dll.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_js.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_ps1.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_regsvr.py.basta
C:\tmpugscyilj\modules\packages\Unpacker_zip.py.basta
C:\tmpugscyilj\modules\packages\vbejse.py.basta
C:\tmpugscyilj\modules\packages\vbs.py.basta
C:\tmpugscyilj\modules\packages\wsf.py.basta
C:\tmpugscyilj\modules\packages\Unpacker.py.basta
C:\tmpugscyilj\modules\packages\xls2016.py.basta
C:\tmpugscyilj\modules\packages\xls.py.basta
C:\tmpugscyilj\modules\packages\xslt.py.basta
C:\tmpugscyilj\modules\packages\zip_compound.py.basta
C:\tmpugscyilj\modules\packages\__init__.py.basta
C:\tmpugscyilj\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpxa6n6jlb\data\yara\Al-khaser.yar.basta
C:\tmpxa6n6jlb\data\yara\Blister.yar.basta
C:\tmpxa6n6jlb\data\yara\BuerLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\AgentTesla.yar.basta
C:\tmpxa6n6jlb\data\yara\AntiCuckoo.yar.basta
C:\tmpxa6n6jlb\data\yara\BumbleBee.yar.basta
C:\tmpxa6n6jlb\data\yara\CargoBayLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\DarkGate.yar.basta
C:\tmpxa6n6jlb\data\yara\DarkGateLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\DoomedLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\DridexLoader.yar.basta
C:\tmpxa6n6jlb\data\yara\EmotetPacker.yar.basta
C:\tmpxa6n6jlb\data\yara\Formbook.yar.basta
C:\tmpxa6n6jlb\data\yara\GetTickCountAntiVM.yar.basta
C:\tmpxa6n6jlb\data\yara\Guloader.yar.basta
C:\tmpxa6n6jlb\data\yara\HeavensSyscall.yar.basta
C:\tmpxa6n6jlb\data\yara\IcedID.yar.basta
C:\tmpxa6n6jlb\data\yara\Latrodectus.yar.basta
C:\tmpugscyilj\modules\packages\vawtrak.py.basta
C:\tmpxa6n6jlb\data\yara\Lumma.yar.basta
C:\tmpugscyilj\modules\packages\zip.py.basta
C:\tmpugscyilj\modules\packages\xps.py.basta
C:\tmpxa6n6jlb\data\yara\QakBot.yar.basta
C:\tmpxa6n6jlb\data\yara\Rhadamanthys.yar.basta
C:\tmpxa6n6jlb\data\yara\VBCrypter.yar.basta
C:\tmpxa6n6jlb\data\yara\RisePro.yar.basta
C:\tmpxa6n6jlb\data\yara\XWorm.yar.basta
C:\tmpxa6n6jlb\data\yara\UrsnifV3.yar.basta
C:\tmpxa6n6jlb\lib\api\process.py.basta
C:\tmpxa6n6jlb\lib\api\screenshot.py.basta
C:\tmpxa6n6jlb\lib\api\utils.py.basta
C:\tmpxa6n6jlb\lib\api\__init__.py.basta
C:\tmpxa6n6jlb\lib\common\common.py.basta
C:\tmpxa6n6jlb\lib\common\constants.py.basta
C:\tmpxa6n6jlb\lib\common\abstracts.py.basta
C:\tmpxa6n6jlb\lib\common\defines.py.basta
C:\tmpxa6n6jlb\lib\common\exceptions.py.basta
C:\tmpxa6n6jlb\lib\common\parse_pe.py.basta
C:\tmpxa6n6jlb\lib\common\rand.py.basta
C:\tmpxa6n6jlb\lib\common\errors.py.basta
C:\Archivos de programa\RUXIM\Assets\MainGraphic.gif.basta
C:\tmpxa6n6jlb\lib\common\registry.py.basta
C:\tmpxa6n6jlb\lib\common\zip_utils.py.basta
C:\tmpxa6n6jlb\lib\common\__init__.py.basta
C:\tmpxa6n6jlb\lib\core\compound.py.basta
C:\tmpxa6n6jlb\lib\core\config.py.basta
C:\tmpxa6n6jlb\lib\core\log.py.basta
C:\tmpxa6n6jlb\lib\core\packages.py.basta
C:\tmpxa6n6jlb\lib\core\pipe.py.basta
C:\tmpxa6n6jlb\lib\core\privileges.py.basta
C:\tmpxa6n6jlb\lib\core\__init__.py.basta
C:\tmpxa6n6jlb\lib\core\startup.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\amsi_collector.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\browser.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\curtain.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\autoruns.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\during_script.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\filepickup.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\digisig.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\html_scraper.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\permissions.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\recentfiles.py.basta
C:\tmpxa6n6jlb\modules\packages\access.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\screenshots.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\__init__.py.basta
C:\tmpxa6n6jlb\modules\auxiliary\procmon.py.basta
C:\tmpxa6n6jlb\modules\packages\autoit.py.basta
C:\tmpxa6n6jlb\modules\packages\archive.py.basta
C:\tmpxa6n6jlb\modules\packages\cpl.py.basta
C:\tmpxa6n6jlb\modules\packages\dll.py.basta
C:\tmpxa6n6jlb\modules\packages\doc2016.py.basta
C:\tmpxa6n6jlb\modules\packages\edge.py.basta
C:\tmpxa6n6jlb\modules\packages\hwp.py.basta
C:\tmpxa6n6jlb\modules\packages\generic.py.basta
C:\tmpxa6n6jlb\modules\packages\js.py.basta
C:\tmpxa6n6jlb\modules\packages\lnk.py.basta
C:\tmpxa6n6jlb\modules\packages\msbuild.py.basta
C:\tmpxa6n6jlb\modules\packages\msix.py.basta
C:\tmpxa6n6jlb\modules\packages\nsis.py.basta
C:\tmpxa6n6jlb\modules\packages\msg.py.basta
C:\tmpxa6n6jlb\modules\packages\pdf.py.basta
C:\tmpxa6n6jlb\modules\packages\ollydbg.py.basta
C:\tmpxa6n6jlb\modules\packages\msi.py.basta
C:\tmpxa6n6jlb\modules\packages\ps1.py.basta
C:\tmpxa6n6jlb\modules\packages\pub2016.py.basta
C:\tmpxa6n6jlb\modules\packages\rar.py.basta
C:\tmpxa6n6jlb\modules\packages\reg.py.basta
C:\tmpxa6n6jlb\modules\packages\regsvr.py.basta
C:\tmpxa6n6jlb\modules\packages\sct.py.basta
C:\tmpxa6n6jlb\modules\packages\service.py.basta
C:\tmpxa6n6jlb\modules\packages\service_dll.py.basta
C:\tmpxa6n6jlb\modules\packages\python.py.basta
C:\tmpxa6n6jlb\modules\packages\one.py.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_dll.py.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_js.py.basta
C:\tmpxa6n6jlb\modules\packages\swf.py.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_regsvr.py.basta
C:\tmpxa6n6jlb\modules\packages\vbs.py.basta
C:\tmpxa6n6jlb\modules\packages\zip_compound.py.basta
C:\tmpxa6n6jlb\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\data\yara\AgentTesla.yar.basta
C:\tmpyhyv52bd\data\yara\Al-khaser.yar.basta
C:\tmpyhyv52bd\data\yara\AntiCuckoo.yar.basta
C:\tmpyhyv52bd\data\yara\Blister.yar.basta
C:\tmpxa6n6jlb\modules\packages\__init__.py.basta
C:\tmpyhyv52bd\data\yara\BuerLoader.yar.basta
C:\tmpxa6n6jlb\modules\packages\zip.py.basta
C:\tmpyhyv52bd\data\yara\BumbleBee.yar.basta
C:\tmpyhyv52bd\data\yara\CargoBayLoader.yar.basta
C:\tmpyhyv52bd\data\yara\DarkGate.yar.basta
C:\tmpyhyv52bd\data\yara\DarkGateLoader.yar.basta
C:\tmpyhyv52bd\data\yara\DoomedLoader.yar.basta
C:\tmpyhyv52bd\data\yara\DridexLoader.yar.basta
C:\tmpyhyv52bd\data\yara\EmotetPacker.yar.basta
C:\tmpyhyv52bd\data\yara\HeavensSyscall.yar.basta
C:\tmpxa6n6jlb\modules\packages\Unpacker_ps1.py.basta
C:\tmpxa6n6jlb\modules\packages\xslt.py.basta
C:\tmpyhyv52bd\data\yara\ModiLoader.yar.basta
C:\tmpyhyv52bd\data\yara\MysterySnail.yar.basta
C:\tmpyhyv52bd\data\yara\Pafish.yar.basta
C:\tmpyhyv52bd\data\yara\NSIS.yar.basta
C:\tmpyhyv52bd\data\yara\RdtscpAntiVM.yar.basta
C:\tmpyhyv52bd\data\yara\Rhadamanthys.yar.basta
C:\tmpyhyv52bd\data\yara\QakBot.yar.basta
C:\tmpyhyv52bd\data\yara\UPX.yar.basta
C:\tmpyhyv52bd\data\yara\UrsnifV3.yar.basta
C:\tmpyhyv52bd\lib\api\__init__.py.basta
C:\tmpyhyv52bd\lib\common\common.py.basta
C:\tmpyhyv52bd\lib\api\process.py.basta
C:\tmpyhyv52bd\lib\common\exceptions.py.basta
C:\tmpyhyv52bd\lib\common\rand.py.basta
C:\tmpyhyv52bd\lib\common\hashing.py.basta
C:\tmpyhyv52bd\lib\common\results.py.basta
C:\tmpyhyv52bd\lib\common\parse_pe.py.basta
C:\tmpyhyv52bd\lib\common\__init__.py.basta
C:\tmpyhyv52bd\lib\common\registry.py.basta
C:\tmpyhyv52bd\lib\common\zip_utils.py.basta
C:\tmpyhyv52bd\lib\core\config.py.basta
C:\tmpyhyv52bd\lib\core\compound.py.basta
C:\tmpyhyv52bd\lib\common\errors.py.basta
C:\tmpyhyv52bd\lib\core\log.py.basta
C:\tmpyhyv52bd\lib\core\privileges.py.basta
C:\tmpyhyv52bd\lib\core\packages.py.basta
C:\tmpyhyv52bd\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__init__.py.basta
C:\tmpyhyv52bd\modules\auxiliary\amsi_collector.py.basta
C:\tmpyhyv52bd\lib\core\startup.py.basta
C:\tmpyhyv52bd\modules\auxiliary\browser.py.basta
C:\tmpyhyv52bd\modules\auxiliary\autoruns.py.basta
C:\tmpyhyv52bd\modules\auxiliary\curtain.py.basta
C:\tmpyhyv52bd\modules\auxiliary\during_script.py.basta
C:\tmpyhyv52bd\modules\auxiliary\digisig.py.basta
C:\tmpyhyv52bd\modules\auxiliary\filepickup.py.basta
C:\tmpyhyv52bd\modules\auxiliary\disguise.py.basta
C:\tmpyhyv52bd\modules\auxiliary\html_scraper.py.basta
C:\tmpyhyv52bd\modules\auxiliary\evtx.py.basta
C:\tmpyhyv52bd\modules\auxiliary\pre_script.py.basta
C:\tmpyhyv52bd\modules\auxiliary\recentfiles.py.basta
C:\tmpyhyv52bd\modules\auxiliary\tlsdump.py.basta
C:\tmpyhyv52bd\modules\auxiliary\sysmon.py.basta
C:\tmpyhyv52bd\modules\packages\autoit.py.basta
C:\tmpyhyv52bd\modules\auxiliary\usage.py.basta
C:\tmpyhyv52bd\modules\packages\chrome.py.basta
C:\tmpyhyv52bd\modules\packages\chm.py.basta
C:\tmpyhyv52bd\modules\packages\doc_antivm.py.basta
C:\tmpyhyv52bd\modules\packages\doc.py.basta
C:\tmpyhyv52bd\modules\packages\edge.py.basta
C:\tmpyhyv52bd\modules\packages\dll.py.basta
C:\tmpyhyv52bd\modules\packages\firefox.py.basta
C:\tmpyhyv52bd\modules\packages\doc2016.py.basta
C:\tmpyhyv52bd\modules\packages\eml.py.basta
C:\tmpyhyv52bd\modules\packages\hta.py.basta
C:\tmpyhyv52bd\modules\packages\hwp.py.basta
C:\tmpyhyv52bd\modules\packages\ichitaro.py.basta
C:\tmpyhyv52bd\modules\packages\inp.py.basta
C:\tmpyhyv52bd\modules\packages\js_antivm.py.basta
C:\tmpyhyv52bd\modules\packages\lnk.py.basta
C:\tmpyhyv52bd\modules\packages\mht.py.basta
C:\tmpyhyv52bd\modules\packages\msbuild.py.basta
C:\tmpyhyv52bd\modules\packages\msg.py.basta
C:\tmpyhyv52bd\modules\packages\generic.py.basta
C:\tmpyhyv52bd\modules\packages\inf.py.basta
C:\tmpyhyv52bd\modules\packages\nsis.py.basta
C:\tmpyhyv52bd\modules\packages\ps1.py.basta
C:\tmpyhyv52bd\modules\packages\pub.py.basta
C:\tmpyhyv52bd\modules\packages\pub2016.py.basta
C:\tmpyhyv52bd\modules\packages\python.py.basta
C:\tmpyhyv52bd\modules\packages\rar.py.basta
C:\tmpyhyv52bd\modules\packages\reg.py.basta
C:\tmpyhyv52bd\modules\packages\sct.py.basta
C:\tmpyhyv52bd\modules\packages\service.py.basta
C:\tmpyhyv52bd\modules\packages\regsvr.py.basta
C:\tmpyhyv52bd\modules\packages\Shellcode_x64.py.basta
C:\tmpyhyv52bd\data\yara\Lumma.yar.basta
C:\tmpyhyv52bd\modules\packages\Unpacker_zip.py.basta
C:\tmpyhyv52bd\modules\packages\vawtrak.py.basta
C:\tmpyhyv52bd\modules\packages\wsf.py.basta
C:\tmpyhyv52bd\modules\packages\xslt.py.basta
C:\tmpyhyv52bd\modules\packages\__init__.py.basta
C:\tmpyhyv52bd\modules\packages\zip_compound.py.basta
C:\tmpyhyv52bd\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\data\yara\AgentTesla.yar.basta
C:\tmpyhyv52bd\modules\packages\zip.py.basta
C:\tmp_4c73x2e\data\yara\Al-khaser.yar.basta
C:\tmpyhyv52bd\modules\packages\Unpacker_dll.py.basta
C:\tmpyhyv52bd\data\yara\capemon.yac.basta
C:\tmp_4c73x2e\data\yara\AntiCuckoo.yar.basta
C:\tmp_4c73x2e\data\yara\Blister.yar.basta
C:\tmp_4c73x2e\data\yara\BuerLoader.yar.basta
C:\tmp_4c73x2e\data\yara\BumbleBee.yar.basta
C:\tmp_4c73x2e\data\yara\CargoBayLoader.yar.basta
C:\tmp_4c73x2e\data\yara\EmotetPacker.yar.basta
C:\tmp_4c73x2e\data\yara\DridexLoader.yar.basta
C:\tmp_4c73x2e\data\yara\IcedID.yar.basta
C:\tmp_4c73x2e\data\yara\DoomedLoader.yar.basta
C:\tmp_4c73x2e\data\yara\Lumma.yar.basta
C:\tmp_4c73x2e\data\yara\MysterySnail.yar.basta
C:\tmp_4c73x2e\data\yara\NSIS.yar.basta
C:\tmp_4c73x2e\data\yara\DarkGate.yar.basta
C:\tmp_4c73x2e\data\yara\Latrodectus.yar.basta
C:\tmp_4c73x2e\data\yara\RdtscpAntiVM.yar.basta
C:\tmp_4c73x2e\data\yara\Rhadamanthys.yar.basta
C:\tmp_4c73x2e\data\yara\Pafish.yar.basta
C:\tmp_4c73x2e\data\yara\ModiLoader.yar.basta
C:\tmp_4c73x2e\data\yara\RisePro.yar.basta
C:\tmp_4c73x2e\data\yara\QakBot.yar.basta
C:\tmp_4c73x2e\data\yara\SingleStepAntiHook.yar.basta
C:\tmp_4c73x2e\data\yara\SmokeLoader.yar.basta
C:\tmp_4c73x2e\data\yara\Socks5Systemz.yar.basta
C:\tmp_4c73x2e\data\yara\Stealc.yar.basta
C:\tmp_4c73x2e\data\yara\Syscall.yar.basta
C:\tmp_4c73x2e\data\yara\UrsnifV3.yar.basta
C:\tmp_4c73x2e\data\yara\Zloader.yar.basta
C:\tmp_4c73x2e\lib\api\process.py.basta
C:\tmp_4c73x2e\data\yara\HeavensSyscall.yar.basta
C:\tmp_4c73x2e\lib\common\common.py.basta
C:\tmp_4c73x2e\lib\common\constants.py.basta
C:\tmp_4c73x2e\lib\common\abstracts.py.basta
C:\tmp_4c73x2e\lib\common\exceptions.py.basta
C:\tmp_4c73x2e\lib\common\defines.py.basta
C:\tmp_4c73x2e\lib\common\hashing.py.basta
C:\tmp_4c73x2e\lib\common\parse_pe.py.basta
C:\tmp_4c73x2e\lib\common\rand.py.basta
C:\tmp_4c73x2e\lib\common\registry.py.basta
C:\tmp_4c73x2e\lib\common\results.py.basta
C:\tmp_4c73x2e\lib\common\errors.py.basta
C:\tmp_4c73x2e\data\yara\XWorm.yar.basta
C:\tmp_4c73x2e\lib\common\__init__.py.basta
C:\tmp_4c73x2e\lib\common\zip_utils.py.basta
C:\tmp_4c73x2e\lib\core\compound.py.basta
C:\tmp_4c73x2e\lib\core\config.py.basta
C:\tmp_4c73x2e\lib\core\log.py.basta
C:\tmp_4c73x2e\lib\core\packages.py.basta
C:\tmp_4c73x2e\lib\core\pipe.py.basta
C:\tmp_4c73x2e\lib\core\privileges.py.basta
C:\tmp_4c73x2e\lib\core\startup.py.basta
C:\tmp_4c73x2e\lib\core\__init__.py.basta
C:\tmp_4c73x2e\lib\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\amsi_collector.py.basta
C:\tmp_4c73x2e\modules\auxiliary\autoruns.py.basta
C:\tmp_4c73x2e\data\yara\Formbook.yar.basta
C:\tmp_4c73x2e\modules\auxiliary\amsi.py.basta
C:\tmp_4c73x2e\modules\auxiliary\curtain.py.basta
C:\tmp_4c73x2e\modules\auxiliary\during_script.py.basta
C:\tmp_4c73x2e\modules\auxiliary\digisig.py.basta
C:\tmp_4c73x2e\modules\auxiliary\filepickup.py.basta
C:\tmp_4c73x2e\modules\auxiliary\disguise.py.basta
C:\tmp_4c73x2e\modules\auxiliary\html_scraper.py.basta
C:\tmp_4c73x2e\modules\auxiliary\permissions.py.basta
C:\tmp_4c73x2e\modules\auxiliary\human.py.basta
C:\tmp_4c73x2e\modules\auxiliary\procmon.py.basta
C:\tmp_4c73x2e\modules\auxiliary\recentfiles.py.basta
C:\tmp_4c73x2e\modules\auxiliary\screenshots.py.basta
C:\tmp_4c73x2e\modules\auxiliary\tlsdump.py.basta
C:\tmp_4c73x2e\modules\auxiliary\__init__.py.basta
C:\tmp_4c73x2e\modules\packages\access.py.basta
C:\tmp_4c73x2e\modules\packages\applet.py.basta
C:\tmp_4c73x2e\modules\auxiliary\usage.py.basta
C:\tmp_4c73x2e\modules\packages\autoit.py.basta
C:\tmp_4c73x2e\modules\packages\archive.py.basta
C:\tmp_4c73x2e\modules\packages\chm.py.basta
C:\tmp_4c73x2e\modules\packages\chromium.py.basta
C:\tmp_4c73x2e\modules\packages\chrome.py.basta
C:\tmp_4c73x2e\modules\packages\cpl.py.basta
C:\tmp_4c73x2e\modules\packages\doc.py.basta
C:\tmp_4c73x2e\modules\packages\dll.py.basta
C:\tmp_4c73x2e\modules\packages\doc2016.py.basta
C:\tmp_4c73x2e\modules\packages\exe.py.basta
C:\tmp_4c73x2e\modules\packages\firefox.py.basta
C:\tmp_4c73x2e\modules\packages\ie.py.basta
C:\tmp_4c73x2e\modules\packages\inf.py.basta
C:\tmp_4c73x2e\modules\packages\jar.py.basta
C:\tmp_4c73x2e\modules\packages\inp.py.basta
C:\tmp_4c73x2e\modules\packages\ichitaro.py.basta
C:\tmp_4c73x2e\modules\packages\msbuild.py.basta
C:\tmp_4c73x2e\modules\packages\lnk.py.basta
C:\tmp_4c73x2e\modules\packages\msi.py.basta
C:\tmp_4c73x2e\modules\packages\mht.py.basta
C:\tmp_4c73x2e\modules\packages\msg.py.basta
C:\tmp_4c73x2e\modules\packages\nsis.py.basta
C:\tmp_4c73x2e\modules\packages\one.py.basta
C:\tmp_4c73x2e\modules\packages\ollydbg.py.basta
C:\tmp_4c73x2e\modules\packages\pdf.py.basta
C:\tmp_4c73x2e\modules\packages\ppt.py.basta
C:\tmp_4c73x2e\modules\packages\ppt2016.py.basta
C:\tmp_4c73x2e\modules\packages\ps1.py.basta
C:\tmp_4c73x2e\modules\packages\pub.py.basta
C:\tmp_4c73x2e\modules\packages\pub2016.py.basta
C:\tmp_4c73x2e\modules\packages\python.py.basta
C:\tmp_4c73x2e\modules\packages\reg.py.basta
C:\tmp_4c73x2e\modules\packages\regsvr.py.basta
C:\tmp_4c73x2e\modules\packages\service.py.basta
C:\tmp_4c73x2e\modules\packages\service_dll.py.basta
C:\tmp_4c73x2e\modules\packages\Shellcode.py.basta
C:\tmp_4c73x2e\modules\packages\swf.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_dll.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_ps1.py.basta
C:\tmp_4c73x2e\modules\packages\rar.py.basta
C:\tmp_4c73x2e\modules\packages\Unpacker_regsvr.py.basta
C:\tmp_4c73x2e\modules\packages\vawtrak.py.basta
C:\tmp_4c73x2e\modules\packages\vbs.py.basta
C:\tmp_4c73x2e\modules\packages\wsf.py.basta
C:\tmp_4c73x2e\modules\packages\xls.py.basta
C:\tmp_4c73x2e\modules\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__init__.py.basta
C:\tmp_4c73x2e\modules\packages\xls2016.py.basta
C:\tmp_4c73x2e\modules\packages\zip.py.basta
C:\tmp_4c73x2e\modules\packages\zip_compound.py.basta
C:\tmp_4c73x2e\modules\packages\xps.py.basta
C:\Users\Default\SendTo\Compressed (zipped) Folder.ZFSendToTarget.basta
C:\Users\Default\SendTo\Desktop (create shortcut).DeskLink.basta
C:\Users\Default\SendTo\Fax Recipient.lnk.basta
C:\Users\Default\SendTo\Mail Recipient.MAPIMail.basta
C:\Users\pacop\Configuraci\xf3n local\IconCache.db.basta
C:\Users\pacop\Cookies\deprecated.cookie.basta
C:\Users\pacop\Desktop\descarga.jpg.basta
C:\Users\pacop\Downloads\registros_v2.ps1.basta
C:\Users\pacop\Downloads\pizza.pyw.basta
C:\Users\pacop\Favorites\Bing.url.basta
C:\Users\pacop\Links\Desktop.lnk.basta
C:\Users\pacop\Reciente\a.lnk.basta
C:\Users\pacop\Reciente\cambios.lnk.basta
C:\Users\pacop\Reciente\compra (2).lnk.basta
C:\Users\pacop\Reciente\compra.lnk.basta
C:\Users\pacop\Reciente\cosas.lnk.basta
C:\Users\pacop\Reciente\desactivardisp.lnk.basta
C:\Users\pacop\Reciente\descarga (1).lnk.basta
C:\Users\pacop\Reciente\descarga.lnk.basta
C:\Users\pacop\Reciente\Descargas.lnk.basta
C:\Users\pacop\Reciente\Disco local (C) (2).lnk.basta
C:\Users\pacop\Reciente\Disco local (C).lnk.basta
C:\Users\pacop\Reciente\Este equipo.lnk.basta
C:\Users\pacop\Reciente\images.lnk.basta
C:\Users\pacop\Reciente\Internet.lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay---.lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck- (2).lnk.basta
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck-.lnk.basta
C:\Users\pacop\Reciente\ms-settingsnetwork-ethernet.lnk.basta
C:\Users\pacop\Reciente\ms-settingsnetwork.lnk.basta
C:\Users\pacop\Reciente\ms-settingswindowsupdate.lnk.basta
C:\Users\pacop\Reciente\pizza.lnk.basta
C:\Users\pacop\Reciente\prueba.lnk.basta
C:\Users\pacop\Reciente\raton (2).lnk.basta
C:\Users\pacop\Reciente\raton.lnk.basta
C:\Users\pacop\Reciente\red.lnk.basta
C:\Users\pacop\Reciente\registros.lnk.basta
C:\Users\pacop\Reciente\registros_v2.lnk.basta
C:\Users\pacop\Reciente\test.lnk.basta
C:\Users\pacop\Reciente\Trabajo.lnk.basta
C:\Users\pacop\Reciente\windowsdefender--enablertp-.lnk.basta
C:\Users\pacop\Searches\Everywhere.search-ms.basta
C:\Users\pacop\Searches\Indexed Locations.search-ms.basta
C:\Users\pacop\Searches\winrt--{S-1-5-21-3747987639-2506909737-3802746916-1001}-.searchconnector-ms.basta
C:\Users\pacop\SendTo\Compressed (zipped) Folder.ZFSendToTarget.basta
C:\Users\pacop\SendTo\Desktop (create shortcut).DeskLink.basta
C:\Users\pacop\SendTo\Documentos.mydocs.basta
C:\Users\pacop\SendTo\Fax Recipient.lnk.basta
C:\Users\pacop\SendTo\Mail Recipient.MAPIMail.basta
C:\Users\pacop\SendTo\Transferencia de archivos Bluetooth.LNK.basta
C:\Users\Public\Libraries\RecordedTV.library-ms.basta
C:\Users\pacop\Downloads\7z2407-x64.exe.basta
C:\Users\pacop\Downloads\ndp48-web.exe.basta
C:\Archivos de programa\Google\Chrome\Application\chrome.VisualElementsManifest.xml.basta
C:\Archivos de programa\Google\Chrome\Application\initial_preferences.basta
C:\Archivos de programa\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.basta
C:\Archivos de programa\Google\Chrome\Application\chrome_proxy.exe.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\plugins.dat.basta
C:\Archivos de programa\VideoLAN\VLC\skins\skin.catalog.basta
C:\Archivos de programa\VideoLAN\VLC\skins\skin.dtd.basta
C:\Archivos de programa\VideoLAN\VLC\skins\winamp2.xml.basta
C:\Archivos de programa\VideoLAN\VLC\skins\default.vlt.basta
C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_edge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\126.0.2592.113.manifest.basta
C:\Users\pacop\Downloads\ChromeSetup.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\delegatedWebFeatures.sccd.basta
C:\FDwSxoT\memory\9812.dmp.basta
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\new_msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\Edge.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\d3dcompiler_47.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\ffmpeg.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libEGL.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\microsoft_shell_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libGLESv2.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\icudtl.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_100_percent.pak.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_200_percent.pak.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_wer.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxcompiler.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_pwa_launcher.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140_codecvt_ids.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140.dll.basta
C:\Users\pacop\Downloads\python-3.10.6.exe.basta
C:\Users\pacop\Downloads\python-3.10.6-amd64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\notification_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_elf.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\prefs_enclave_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onramp.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\show_third_party_software_licenses.bat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneds.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onnxruntime.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\v8_context_snapshot.bin.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140_1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vccorlib140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader_icd.json.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\telclient.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wdag.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\webview2_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vulkan-1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\126.0.2592.87.manifest.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\delegatedWebFeatures.sccd.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wns_push_client.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneauth.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Edge.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\microsoft_shell_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mspdf.dll.basta
C:\Users\pacop\Downloads\vlc-3.0.21-win64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_proxy.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_wer.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_pwa_launcher.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140_codecvt_ids.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\notification_helper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onramp.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\prefs_enclave_x64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\icudtl.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\show_third_party_software_licenses.bat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vccorlib140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140_1.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vk_swiftshader_icd.json.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\pwahelper.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\webview2_integration.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onnxruntime.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\EdgeUpdate.dat.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wdag.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeComRegisterShellARM64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateBroker.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdate.exe.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wns_push_client.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateCore.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_af.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_am.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ar.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateOnDemand.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_az.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bg.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn-IN.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_as.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca-Es-VALENCIA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bs.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cs.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cy.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_da.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_de.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_el.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en-GB.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es-419.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_et.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_eu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fa.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fil.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr-CA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ga.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gd.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hu.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_id.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_is.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_it.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_iw.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ja.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_km.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ko.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kok.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lb.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lo.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ka.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lv.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ml.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ms.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ne.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nb.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nn.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pa.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_or.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-BR.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-PT.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_quz.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ro.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ru.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sl.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sq.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-BA.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-RS.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxcompiler.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sv.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Latn-RS.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ta.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_te.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_th.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tr.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ug.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tt.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_uk.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_vi.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-CN.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\NOTICE.TXT.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-TW.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateSetup.exe.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_arm64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_arm64.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\oneauth.dll.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\resources.pak.basta
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip File Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip Help.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Remote Desktop Connection.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Snipping Tool.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Steps Recorder.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Computer Management.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\dfrgui.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Disk Cleanup.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Component Services.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Wordpad.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Event Viewer.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\iSCSI Initiator.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Quick Assist.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Paint.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Math Input Panel.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\RecoveryDrive.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Registry Editor.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\services.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (32-bit).lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (64-bit).lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\Task Manager.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Memory Diagnostics Tool.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Information.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Performance Monitor.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Configuration.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\Documentation.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VideoLAN Website.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\Release Notes.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player - reset preferences and cache files.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Task Scheduler.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player skinned.lnk.basta
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player.lnk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-7e1cd04ad2694f1d89fd94ad5005a8e2-a696c450-a52d-45b4-844d-bb5b45de5f0c-7607.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.aggregators.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.bk.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json.basta
C:\ProgramData\Microsoft\IdentityCRL\INT\wlidsvcconfig.xml.basta
C:\ProgramData\Microsoft\IdentityCRL\production\wlidsvcconfig.xml.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2,1.2.3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures,0.2.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf,3.26.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack,1.11.59.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3,2.2.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack,2.6.100-alpha.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations,2.6.100-alpha.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_6_27_9_11_35.etl.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions,8.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features,8.0.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions,8.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options,8.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D,1.1.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_7_2_11_12_17.etl.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex,0.23051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed,1.24032.33.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard,0.22092.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools,17.4.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime,2.3.24.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications,7.1.3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf,1.1.39.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json,13.0.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http,3.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting,8.3.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy,8.0.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24051.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24061.4.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport,0.7.2012.2221.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3,2.1.6.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless,5.15.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt,7.5.1.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers,21.0.2.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder,8.0.0.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24052.12.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24051.18.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24061.17.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24052.12.basta
C:\ProgramData\Microsoft\Network\Downloader\edb.chk.basta
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.basta
C:\ProgramData\Microsoft\Network\Downloader\edb00005.log.basta
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mspdf.dll.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch.basta
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\Policy.vpol.basta
C:\ProgramData\Microsoft\Network\Downloader\edbres00001.jrs.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.095fa57d-ff28-4ace-b003-d80969b7eaf8.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.0e9fd7cc-1a55-4f04-aedb-4729c6d87ad1.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.193aa476-9ca8-4c7f-95f6-587478ce0d4a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.1b41d6b3-dbf3-4dcd-b002-70b8233361ed.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.1bd2b8ef-7918-48fc-83c6-1a6ce253c9d9.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.1f95d7c6-3855-4363-9f81-d243d8de1f15.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2daf42e2-867a-45df-bda7-4ad150d60002.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2df61257-f2a4-489a-9965-76193a56cb95.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.2f99ba07-e9ed-440d-90d8-c1e0edad8d0d.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.309119e8-a09e-4616-b8ce-b25153bfbc98.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.3c9b29b0-fe64-4f75-b8b9-df5d0e52972a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.4758898c-63ca-4d2c-adcc-ab93ccadd625.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.4de6b889-5844-4c31-9c0c-c473c3231c19.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.554a17c6-e729-497c-95d8-cfe28471a652.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.5921fa58-3dd4-4e42-94fb-33f9bb9358a8.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.726e8be6-2ee1-4513-8f38-cb0be019a0dd.1.etl.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.72f91d8c-1b7b-4aa3-8405-c757fd6ebcde.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.7e4a35ae-3981-4f2b-8288-ec478737578a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.80bd21cc-05a1-4df5-bbe5-0cee92ed1a45.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.820f69ff-91ff-478d-8a93-39274769fe9a.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.9a5bb5f1-7806-4244-9ec6-d5eb1e9d5f48.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.a09f1e5d-2191-4877-98c3-27d9b5806b57.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.a76d7b7f-1ace-4e8d-bc01-2581a469daef.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.b4cd1260-6516-4085-ae08-92b9bfc54534.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.aea00fe8-33dd-4236-bf2a-41c47700fd7c.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.be3ae783-8c8e-44a6-b6d0-1ac13a606b08.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.c202214f-8e1a-42ee-b597-347a053c7979.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.c3169fb6-fa66-4d96-9300-533aebc9f098.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.ce575aca-8918-49da-b848-1062455c66bc.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.d33c7d53-15e4-4f31-9dc2-a5c3af8bb1f7.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.e3399f10-561c-455b-bd30-a68298638ee5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.f1e47454-d7a5-4821-958c-9cff4213b8d5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotificationUx.f3a1f03f-31f9-4590-b6b4-f69d7dd871b5.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.142f1637-5eb3-4fd5-81c3-cbdeb5f7dd0c.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.170e4249-3e7a-4b0d-a84b-ec8ab356bddc.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.230e5658-e645-4a53-85a3-4638be5cc751.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2c41f663-ad28-4be7-9824-449179c453de.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.33cdb750-2f85-4b82-8cad-956b48256087.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.4566d46b-3bf9-4d19-a826-f848c6413e08.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.5e49103c-4274-48ec-a356-445f69835356.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.534961f0-f220-4832-ab76-84c3de1463f0.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.80076f1c-4788-40e7-9eb7-363f101b97c0.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.947a7ed1-5c30-4c88-8634-80550dcf13c1.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.9d354caa-5e1a-4227-84e9-f39e652f73fb.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.c6dba209-1710-4598-b687-e8fa5081de94.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.f6ac4910-dfde-4b2e-afad-993bf0473d96.1.etl.basta
C:\ProgramData\USOShared\Logs\User\NotifyIcon.cffac2f9-4b7c-4d48-997d-6910548288a7.1.etl.basta
C:\tmp228rx8rl\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\ProgramData\USOShared\Logs\User\UpdateUx.cc112a0b-857a-4105-a70f-a03e89907d9d.1.etl.basta
C:\tmp228rx8rl\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp228rx8rl\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp228rx8rl\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp228rx8rl\tests\lib\api\test_process.py.basta
C:\tmp228rx8rl\tests\lib\common\test_abstracts.py.basta
C:\tmp228rx8rl\tests\modules\packages\test_ps1.py.basta
C:\tmp3bs9izg4\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp3bs9izg4\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp3bs9izg4\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3bs9izg4\tests\lib\api\test_process.py.basta
C:\tmp3bs9izg4\tests\lib\common\test_abstracts.py.basta
C:\tmp3bs9izg4\tests\modules\packages\test_ps1.py.basta
C:\tmp3ljmycja\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmp3ljmycja\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp3ljmycja\tests\lib\api\test_process.py.basta
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_Autopilot_2024_6_19_12_44_57.etl.basta
C:\tmp3ljmycja\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp3ljmycja\tests\lib\common\test_abstracts.py.basta
C:\tmp3ljmycja\tests\modules\packages\test_ps1.py.basta
C:\tmpb9ol310j\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpb9ol310j\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpb9ol310j\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpb9ol310j\tests\lib\api\test_process.py.basta
C:\tmpb9ol310j\tests\modules\packages\test_ps1.py.basta
C:\tmpb9ol310j\tests\lib\common\test_abstracts.py.basta
C:\tmpcynaajs6\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpcynaajs6\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpcynaajs6\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpcynaajs6\tests\lib\api\test_process.py.basta
C:\tmpcynaajs6\tests\modules\packages\test_ps1.py.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpd5tr1_rv\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpd5tr1_rv\tests\lib\api\test_process.py.basta
C:\tmpeoix3ml5\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpeoix3ml5\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\procmon.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpeoix3ml5\tests\lib\api\test_process.py.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\tmpeoix3ml5\tests\modules\packages\test_ps1.py.basta
C:\tmpeoix3ml5\tests\lib\common\test_abstracts.py.basta
C:\tmph_w19omx\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmph_w19omx\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmph_w19omx\lib\api\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmph_w19omx\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmph_w19omx\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\constants.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\exceptions.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\ProgramData\Microsoft\Network\Downloader\edbres00002.jrs.basta
C:\tmpyhyv52bd\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\startup.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\usage.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\packages\__pycache__\__init__.cpython-310.pyc.basta
C:\tmpyhyv52bd\tests\lib\api\test_process.py.basta
C:\tmpyhyv52bd\tests\lib\common\test_abstracts.py.basta
C:\tmp_4c73x2e\lib\api\__pycache__\screenshot.cpython-310.pyc.basta
C:\tmpyhyv52bd\tests\modules\packages\test_ps1.py.basta
C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log.basta
C:\tmp_4c73x2e\lib\api\__pycache__\utils.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\api\__pycache__\process.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\common.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\abstracts.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\defines.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\hashing.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\errors.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\parse_pe.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\rand.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\registry.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\compound.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\config.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\packages.cpython-310.pyc.basta
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\common\__pycache__\results.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\log.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\browser.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\curtain.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\digisig.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\pipe.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\privileges.cpython-310.pyc.basta
C:\tmp_4c73x2e\lib\core\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\disguise.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\evtx.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\permissions.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\during_script.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\human.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\__init__.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc.basta
C:\tmp_4c73x2e\modules\packages\__pycache__\exe.cpython-310.pyc.basta
C:\tmp_4c73x2e\tests\lib\api\test_process.py.basta
C:\tmp_4c73x2e\tests\lib\common\test_abstracts.py.basta
C:\tmp_4c73x2e\tests\modules\packages\test_ps1.py.basta
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc.basta
C:\Users\Default\Men\xfa Inicio\Programas\OneDrive.lnk.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\a94bb0b5a18bc1de.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdpresource.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.pacop.cdpresource.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst.basta
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdp.basta
C:\Users\pacop\Configuraci\xf3n local\Historial\desktop.ini.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\.ses.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F1.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\cv_debug.log.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct759.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct1FA.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct8E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct9C31.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wct11CD.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E0.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E1.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E2.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctDE31.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\wctD699.tmp.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\9f4c690fdf0c329b419e.exe.basta
C:\Users\pacop\Desktop\cosas\descarga (1).jpg.basta
C:\Users\pacop\Desktop\cosas\images.jpg.basta
C:\Users\pacop\Configuraci\xf3n local\Temp\agenttesla.exe.basta
C:\Users\pacop\Desktop\cosas\descarga.jpg.basta
C:\Users\pacop\Men\xfa Inicio\Programas\OneDrive.lnk.basta
C:\Users\pacop\Reciente\AutomaticDestinations\3120801ba34a2faa.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\573770283dc3d854.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\590aee7bdd69b59b.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\5d696d521de238c3.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\7cc515ce9647ec58.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\761ad72d4964582f.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\40b6c2ffc92fa1cd.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\da4554e92cc91a44.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\AutomaticDestinations\f18460fded109990.automaticDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\590aee7bdd69b59b.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\5d696d521de238c3.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\7e4dca80246863e3.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\ccba5a5986c77e43.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\f01b4d95cf55d32a.customDestinations-ms.basta
C:\Users\pacop\Reciente\CustomDestinations\8e4e81d9adc545b8.customDestinations-ms.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\126.0.6478.185.manifest.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.dll.sig.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.exe.sig.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_wer.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_100_percent.pak.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_elf.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_pwa_launcher.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_200_percent.pak.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\eventlog_provider.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxil.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\elevation_service.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libEGL.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\mojo_core.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\d3dcompiler_47.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\notification_helper.exe.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libGLESv2.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\icudtl.dat.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\v8_context_snapshot.bin.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader_icd.json.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\optimization_guide_internal.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vulkan-1.dll.basta
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\VLSub.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\custom.lua.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\favicon.ico.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\index.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_browse.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_equalizer.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_view.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\view.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm_export.html.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\cli.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dummy.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dumpmeta.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\http.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\luac.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\intf\telnet.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\common.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\dkjson.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\sandbox.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\modules\simplexml.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_streams.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_xml.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\appletrailers.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\cue.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\dailymotion.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\jamendo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\koreus.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\liveleak.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\newgrounds.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\soundcloud.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\twitch.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vimeo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vocaroo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\youtube.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\sd\icecast.luac.basta
C:\Archivos de programa\VideoLAN\VLC\lua\sd\jamendo.luac.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\old_chrome.exe.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libattachment_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\resources.pak.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libcdda_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdshow_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libftp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libidummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libimem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdtv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblive555_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libnfs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdcp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsatip_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libscreen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsdp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librist_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libshm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsmb_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtcp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libudp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvcd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librtp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvdr_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsftp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_rist_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liba52_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvnc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll.basta
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxcompiler.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdca_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaom_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libg711_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libflac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libkate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmft_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libopus_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libpng_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libstl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libt140_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libttml_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx264_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libgestures_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libntservice_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libasf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libau_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libavi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libes_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libimage_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libgme_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmod_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libogg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libpva_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libreal_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libtta_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libty_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libwav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libxa_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx265_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\liblua_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libexport_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libstats_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libxml_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\librss_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglinterop_dxva2_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll.basta
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\126.0.2592.113.manifest.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\concrt140.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\cookie_exporter.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\delegatedWebFeatures.sccd.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dxil.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\Edge.dat.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\EdgeWebView.dat.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dual_engine_adapter_x64.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\eventlog_provider.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\elevation_service.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\d3dcompiler_47.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.manifest.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\ffmpeg.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\learning_tools.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libEGL.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\microsoft_shell_integration.dll.basta
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libqt_plugin.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_protection_sdk.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mojo_core.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_core.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.dll.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libGLESv2.dll.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.sig.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge_100_percent.pak.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.basta
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\icudtl.dat.basta

Deleted Files

C:\604.ini
C:\640.ini
C:\tmp228rx8rl\analysis.conf
C:\tmp228rx8rl\pytest.ini
C:\tmp3bs9izg4\pytest.ini
C:\tmpb9ol310j\pytest.ini
C:\tmp3ljmycja\pytest.ini
C:\tmpcynaajs6\analysis.conf
C:\tmpd5tr1_rv\pytest.ini
C:\tmpeoix3ml5\analysis.conf
C:\tmp228rx8rl\analyzer.py
C:\tmpeoix3ml5\pytest.ini
C:\tmph_w19omx\analysis.conf
C:\tmpb9ol310j\analyzer.py
C:\tmph_w19omx\pytest.ini
C:\tmpsv59hb03\analysis.conf
C:\tmpcynaajs6\analyzer.py
C:\tmpsv59hb03\pytest.ini
C:\tmpugscyilj\analysis.conf
C:\tmph_w19omx\analyzer.py
C:\tmpugscyilj\pytest.ini
C:\tmpxa6n6jlb\analysis.conf
C:\tmpxa6n6jlb\analyzer.py
C:\tmpxa6n6jlb\pytest.ini
C:\tmpyhyv52bd\analysis.conf
C:\tmpyhyv52bd\analyzer.py
C:\Archivos de programa\7-Zip\7-zip.chm
C:\Archivos de programa\7-Zip\7-zip.dll
C:\Archivos de programa\7-Zip\7-zip32.dll
C:\tmpugscyilj\analyzer.py
C:\Archivos de programa\7-Zip\7z.sfx
C:\tmp3ljmycja\analyzer.py
C:\Archivos de programa\7-Zip\7zCon.sfx
C:\Archivos de programa\7-Zip\7z.exe
C:\Archivos de programa\7-Zip\descript.ion
C:\Archivos de programa\7-Zip\History.txt
C:\Archivos de programa\7-Zip\License.txt
C:\Archivos de programa\7-Zip\Uninstall.exe
C:\tmpd5tr1_rv\analyzer.py
C:\Archivos de programa\Microsoft Update Health Tools\expediteupdater.exe
C:\Archivos de programa\7-Zip\7zFM.exe
C:\tmp3bs9izg4\analyzer.py
C:\Archivos de programa\Microsoft Update Health Tools\unifiedinstaller.dll
C:\Archivos de programa\RUXIM\DTUDriver.exe
C:\Archivos de programa\RUXIM\plugscheduler.xml
C:\Archivos de programa\RUXIM\resources.pri
C:\Archivos de programa\7-Zip\7zG.exe
C:\Archivos de programa\Microsoft Update Health Tools\QualityUpdateAssistant.dll
C:\Archivos de programa\RUXIM\RUXIMUXResources.dll
C:\Archivos de programa\Microsoft Update Health Tools\uhssvc.exe
C:\BykZfbvJv\CAPE\5368_1025171522201127462024
C:\BykZfbvJv\CAPE\5368_178396430927462024
C:\BykZfbvJv\CAPE\5368_299646040927462024
C:\BykZfbvJv\CAPE\5368_410803130927462024
C:\Archivos de programa\RUXIM\RUXIMPHDialogHandlers.dll
C:\BykZfbvJv\CAPE\5368_456264422201127462024
C:\BykZfbvJv\CAPE\5368_597069030927462024
C:\BykZfbvJv\tlsdump\tlsdump.log
C:\BykZfbvJv\CAPE\5368_93744519201127462024
C:\FDwSxoT\CAPE\10112_1071445386926362024
C:\FDwSxoT\CAPE\10112_12510038479926362024
C:\Archivos de programa\RUXIM\RUXIMIH.exe
C:\FDwSxoT\CAPE\10112_1498053499926362024
C:\FDwSxoT\CAPE\10112_1548024437261026362024
C:\FDwSxoT\CAPE\10112_1746682549926362024
C:\FDwSxoT\CAPE\10112_188635037261026362024
C:\FDwSxoT\CAPE\10112_20011035386926362024
C:\FDwSxoT\CAPE\10112_218277037261026362024
C:\Archivos de programa\RUXIM\SystemEvaluator.dll
C:\FDwSxoT\CAPE\10112_22398012579926362024
C:\FDwSxoT\CAPE\10112_2855496837261026362024
C:\FDwSxoT\CAPE\10112_4317761559926362024
C:\FDwSxoT\CAPE\10112_4908850396926362024
C:\FDwSxoT\CAPE\10112_508908437261026362024
C:\FDwSxoT\CAPE\10112_588825937261026362024
C:\FDwSxoT\CAPE\10112_8634905386926362024
C:\FDwSxoT\CAPE\9812_13360515256926362024
C:\Archivos de programa\Microsoft Update Health Tools\sedplugins.dll
C:\FDwSxoT\CAPE\10112_710079579926362024
C:\FDwSxoT\CAPE\9812_148050256926362024
C:\FDwSxoT\CAPE\9812_25476220266926362024
C:\FDwSxoT\CAPE\9812_403704038261026362024
C:\FDwSxoT\CAPE\9812_2771352037261026362024
C:\FDwSxoT\CAPE\9812_514455737261026362024
C:\FDwSxoT\CAPE\9812_5610038261026362024
C:\FDwSxoT\CAPE\9812_64116276926362024
C:\FDwSxoT\CAPE\9812_698113637261026362024
C:\FDwSxoT\CAPE\10112_13487084499926362024
C:\Archivos de programa\7-Zip\7z.dll
C:\FDwSxoT\CAPE\9812_702293538261026362024
C:\FDwSxoT\CAPE\9812_804804256926362024
C:\FDwSxoT\CAPE\9812_741427238261026362024
C:\FDwSxoT\CAPE\9812_728209238261026362024
C:\FDwSxoT\CAPE\9812_8924546376926362024
C:\FDwSxoT\CAPE\10112_11462272489926362024
C:\FDwSxoT\CAPE\10112_1545258569926362024
C:\FDwSxoT\CAPE\9812_135927038261026362024
C:\curtain.log
C:\FDwSxoT\tlsdump\tlsdump.log
C:\JeMgNHV\debugger\5156.log
C:\kSSIhSwY\CAPE\4844_1090910516501227462024
C:\kSSIhSwY\CAPE\4844_225977216501227462024
C:\kSSIhSwY\CAPE\4844_59174881650627462024
C:\kSSIhSwY\tlsdump\tlsdump.log
C:\leQWkw\tlsdump\tlsdump.log
C:\pAXehsPqeZ\debugger\7508.log
C:\pAXehsPqeZ\tlsdump\tlsdump.log
C:\ProgramData\Escritorio\Google Chrome.lnk
C:\ProgramData\Escritorio\Microsoft Edge.lnk
C:\ProgramData\Escritorio\VLC media player.lnk
C:\qFosxWEw\CAPE\8312_11630851844827462024
C:\qFosxWEw\CAPE\8312_2108001944827462024
C:\qFosxWEw\CAPE\8312_45528483841827462024
C:\qFosxWEw\CAPE\8312_88614243441827462024
C:\qFosxWEw\CAPE\8312_93814203841827462024
C:\qFosxWEw\CAPE\8312_9493141844827462024
C:\qFosxWEw\tlsdump\tlsdump.log
C:\Recovery\OEM\AfterImageApply_BDB0C1E8-6951-46C4-AB7F-C07B29F462FD.cmd
C:\Recovery\OEM\ResetConfig.xml
C:\sjVjjdVWyc\tlsdump\tlsdump.log
C:\tmp228rx8rl\bin\autoit3.exe
C:\tmp228rx8rl\bin\fZgZRCx.exe
C:\tmp228rx8rl\bin\geckodriver.exe
C:\tmp228rx8rl\bin\loader.exe
C:\tmp228rx8rl\bin\loader_x64.exe
C:\tmp228rx8rl\bin\mNEQAyDN.exe
C:\tmp228rx8rl\bin\PPLinject.exe
C:\tmp228rx8rl\bin\PPLinject64.exe
C:\tmp228rx8rl\bin\Procmon.exe
C:\tmp228rx8rl\bin\procmon.pmc
C:\tmp228rx8rl\bin\psexec.exe
C:\tmp228rx8rl\bin\signtool.exe
C:\tmp228rx8rl\data\msix.ps1
C:\tmp228rx8rl\dll\664.ini
C:\tmp228rx8rl\dll\7728.ini
C:\tmp228rx8rl\dll\8324.ini
C:\tmp228rx8rl\dll\capemon.dll
C:\tmp228rx8rl\dll\capemon_x64.dll
C:\tmp228rx8rl\dll\fwyMDy.dll
C:\tmp228rx8rl\dll\ZHEhBGrl.dll
C:\tmp228rx8rl\lib\__init__.py
C:\tmp228rx8rl\modules\__init__.py
C:\tmp228rx8rl\tests\test_analysis_packages.py
C:\tmp228rx8rl\tests\test_analyzer.py
C:\tmp228rx8rl\tests\test_analyzer_files.py
C:\tmp228rx8rl\tests\test_analyzer_process_list.py
C:\tmp3bs9izg4\bin\autoit3.exe
C:\tmp3bs9izg4\bin\geckodriver.exe
C:\tmp3bs9izg4\bin\iMftAZV.exe
C:\tmp3bs9izg4\bin\KsIgtQTW.exe
C:\tmp3bs9izg4\bin\loader.exe
C:\tmp3bs9izg4\bin\loader_x64.exe
C:\tmp3bs9izg4\bin\PPLinject.exe
C:\tmp3bs9izg4\bin\PPLinject64.exe
C:\tmp3bs9izg4\bin\Procmon.exe
C:\tmp3bs9izg4\bin\procmon.pmc
C:\tmp3bs9izg4\bin\psexec.exe
C:\tmp3bs9izg4\bin\signtool.exe
C:\tmp3bs9izg4\data\msix.ps1
C:\tmp3bs9izg4\dll\10092.ini
C:\tmp3bs9izg4\dll\4908.ini
C:\tmp3bs9izg4\dll\652.ini
C:\tmp3bs9izg4\dll\668.ini
C:\tmp3bs9izg4\dll\6820.ini
C:\tmp3bs9izg4\dll\6912.ini
C:\tmp3bs9izg4\dll\764.ini
C:\tmp3bs9izg4\dll\9172.ini
C:\tmp3bs9izg4\dll\9800.ini
C:\tmp3bs9izg4\dll\9872.ini
C:\FDwSxoT\memory\7488.dmp
C:\FDwSxoT\memory\6688.dmp
C:\tmp3bs9izg4\dll\capemon.dll
C:\tmp3bs9izg4\dll\capemon_x64.dll
C:\tmp3bs9izg4\lib\__init__.py
C:\tmp3bs9izg4\modules\__init__.py
C:\tmp3bs9izg4\tests\test_analysis_packages.py
C:\tmp3bs9izg4\tests\test_analyzer.py
C:\tmp3bs9izg4\tests\test_analyzer_files.py
C:\tmp3bs9izg4\tests\test_analyzer_process_list.py
C:\tmp3bs9izg4\dll\WMpzul.dll
C:\tmp3ljmycja\bin\BxQpoUlU.exe
C:\tmp3ljmycja\bin\autoit3.exe
C:\tmp3bs9izg4\dll\MiOLFfQC.dll
C:\tmp3ljmycja\bin\loader_x64.exe
C:\tmp3ljmycja\bin\loader.exe
C:\tmp3ljmycja\bin\procmon.pmc
C:\tmp3ljmycja\bin\psexec.exe
C:\tmp3ljmycja\bin\signtool.exe
C:\tmp3ljmycja\bin\TJgiMzg.exe
C:\tmp3ljmycja\data\msix.ps1
C:\tmp3ljmycja\dll\676.ini
C:\tmp3ljmycja\bin\geckodriver.exe
C:\tmp3ljmycja\dll\AtzxdgLn.dll
C:\FDwSxoT\memory\10112.dmp
C:\FDwSxoT\memory\4840.dmp
C:\tmp3ljmycja\lib\__init__.py
C:\tmp3ljmycja\modules\__init__.py
C:\tmp3ljmycja\tests\test_analysis_packages.py
C:\tmp3ljmycja\tests\test_analyzer.py
C:\tmp3ljmycja\tests\test_analyzer_files.py
C:\tmp3ljmycja\tests\test_analyzer_process_list.py
C:\tmpb9ol310j\bin\aFbdvLL.exe
C:\FDwSxoT\memory\3748.dmp
C:\tmp3ljmycja\bin\Procmon.exe
C:\tmpb9ol310j\bin\loader.exe
C:\tmpb9ol310j\bin\autoit3.exe
C:\tmpb9ol310j\bin\PPLinject.exe
C:\tmp3ljmycja\dll\capemon.dll
C:\tmpb9ol310j\bin\loader_x64.exe
C:\tmpb9ol310j\bin\procmon.pmc
C:\tmpb9ol310j\bin\PPLinject64.exe
C:\tmpb9ol310j\bin\psexec.exe
C:\tmpb9ol310j\bin\signtool.exe
C:\tmpb9ol310j\data\msix.ps1
C:\tmpb9ol310j\dll\5108.ini
C:\tmpb9ol310j\dll\5436.ini
C:\tmpb9ol310j\dll\672.ini
C:\tmpb9ol310j\dll\784.ini
C:\tmpb9ol310j\dll\8104.ini
C:\tmpb9ol310j\bin\UJuBcdJT.exe
C:\tmp3ljmycja\dll\capemon_x64.dll
C:\tmp3ljmycja\dll\zIMuwGE.dll
C:\tmpb9ol310j\bin\geckodriver.exe
C:\tmpb9ol310j\lib\__init__.py
C:\tmpb9ol310j\modules\__init__.py
C:\tmpb9ol310j\tests\test_analysis_packages.py
C:\tmpb9ol310j\tests\test_analyzer.py
C:\tmpb9ol310j\dll\aGuqCwX.dll
C:\tmpb9ol310j\tests\test_analyzer_process_list.py
C:\tmpb9ol310j\tests\test_analyzer_files.py
C:\tmpb9ol310j\dll\capemon.dll
C:\tmpcynaajs6\bin\gpwkXsgs.exe
C:\tmpcynaajs6\bin\IWzvSnF.exe
C:\tmpcynaajs6\bin\loader.exe
C:\tmpcynaajs6\bin\autoit3.exe
C:\tmpcynaajs6\bin\loader_x64.exe
C:\tmpcynaajs6\bin\PPLinject.exe
C:\tmpcynaajs6\bin\PPLinject64.exe
C:\tmpcynaajs6\bin\procmon.pmc
C:\tmpcynaajs6\bin\psexec.exe
C:\tmpcynaajs6\bin\signtool.exe
C:\tmpcynaajs6\data\msix.ps1
C:\tmpcynaajs6\dll\5368.ini
C:\tmpcynaajs6\dll\676.ini
C:\tmpcynaajs6\dll\7564.ini
C:\tmpb9ol310j\dll\capemon_x64.dll
C:\tmpb9ol310j\bin\Procmon.exe
C:\tmpb9ol310j\dll\oPPvjQM.dll
C:\tmpcynaajs6\bin\geckodriver.exe
C:\tmpcynaajs6\lib\__init__.py
C:\tmpcynaajs6\modules\__init__.py
C:\tmpcynaajs6\tests\test_analysis_packages.py
C:\tmpcynaajs6\tests\test_analyzer.py
C:\tmpcynaajs6\tests\test_analyzer_files.py
C:\tmpcynaajs6\tests\test_analyzer_process_list.py
C:\tmpcynaajs6\dll\AnoOgbz.dll
C:\tmpd5tr1_rv\bin\AJPJZeI.exe
C:\tmpcynaajs6\dll\capemon.dll
C:\tmpd5tr1_rv\bin\autoit3.exe
C:\tmpd5tr1_rv\bin\loader.exe
C:\tmpd5tr1_rv\bin\loader_x64.exe
C:\tmpd5tr1_rv\bin\PPLinject.exe
C:\tmpd5tr1_rv\bin\OYBVajFt.exe
C:\tmpd5tr1_rv\bin\PPLinject64.exe
C:\tmpd5tr1_rv\bin\procmon.pmc
C:\tmpd5tr1_rv\bin\psexec.exe
C:\tmpcynaajs6\dll\capemon_x64.dll
C:\tmpd5tr1_rv\data\msix.ps1
C:\tmpd5tr1_rv\dll\672.ini
C:\tmpcynaajs6\dll\ohiagkD.dll
C:\tmpd5tr1_rv\dll\7652.ini
C:\tmpd5tr1_rv\bin\signtool.exe
C:\tmpcynaajs6\bin\Procmon.exe
C:\tmpd5tr1_rv\bin\geckodriver.exe
C:\tmpd5tr1_rv\lib\__init__.py
C:\tmpd5tr1_rv\modules\__init__.py
C:\tmpd5tr1_rv\tests\test_analysis_packages.py
C:\tmpd5tr1_rv\tests\test_analyzer.py
C:\tmpd5tr1_rv\tests\test_analyzer_files.py
C:\tmpd5tr1_rv\tests\test_analyzer_process_list.py
C:\tmpd5tr1_rv\dll\capemon.dll
C:\tmpd5tr1_rv\dll\biRxxbp.dll
C:\tmpeoix3ml5\bin\autoit3.exe
C:\tmpeoix3ml5\bin\loader.exe
C:\tmpeoix3ml5\bin\lHYlaISZ.exe
C:\tmpeoix3ml5\bin\PPLinject.exe
C:\tmpeoix3ml5\bin\loader_x64.exe
C:\tmpeoix3ml5\bin\PPLinject64.exe
C:\tmpeoix3ml5\bin\procmon.pmc
C:\tmpeoix3ml5\bin\psexec.exe
C:\tmpeoix3ml5\bin\signtool.exe
C:\tmpeoix3ml5\bin\Zhuvduq.exe
C:\tmpeoix3ml5\data\msix.ps1
C:\tmpeoix3ml5\dll\4844.ini
C:\tmpeoix3ml5\dll\672.ini
C:\tmpd5tr1_rv\dll\yARuoZGp.dll
C:\tmpd5tr1_rv\dll\capemon_x64.dll
C:\tmpd5tr1_rv\bin\Procmon.exe
C:\tmpeoix3ml5\bin\geckodriver.exe
C:\tmpeoix3ml5\lib\__init__.py
C:\tmpeoix3ml5\modules\__init__.py
C:\tmpeoix3ml5\tests\test_analysis_packages.py
C:\tmpeoix3ml5\tests\test_analyzer.py
C:\tmpeoix3ml5\tests\test_analyzer_files.py
C:\tmpeoix3ml5\tests\test_analyzer_process_list.py
C:\tmpeoix3ml5\dll\capemon.dll
C:\tmpeoix3ml5\dll\jIXOyf.dll
C:\tmph_w19omx\bin\loader.exe
C:\tmph_w19omx\bin\loader_x64.exe
C:\tmph_w19omx\bin\autoit3.exe
C:\tmph_w19omx\bin\PPLinject.exe
C:\tmph_w19omx\bin\PPLinject64.exe
C:\tmph_w19omx\bin\procmon.pmc
C:\tmph_w19omx\bin\psexec.exe
C:\tmpeoix3ml5\dll\capemon_x64.dll
C:\tmph_w19omx\bin\signtool.exe
C:\tmph_w19omx\bin\VSLgQYHf.exe
C:\tmph_w19omx\data\msix.ps1
C:\tmph_w19omx\dll\10048.ini
C:\tmph_w19omx\dll\10112.ini
C:\tmph_w19omx\dll\10136.ini
C:\tmph_w19omx\dll\10196.ini
C:\tmph_w19omx\dll\2848.ini
C:\tmph_w19omx\dll\3748.ini
C:\tmph_w19omx\dll\4840.ini
C:\tmph_w19omx\dll\640.ini
C:\tmph_w19omx\dll\660.ini
C:\tmph_w19omx\dll\6688.ini
C:\tmph_w19omx\dll\7488.ini
C:\tmph_w19omx\dll\752.ini
C:\tmph_w19omx\dll\8076.ini
C:\tmph_w19omx\dll\8464.ini
C:\tmph_w19omx\dll\8492.ini
C:\tmph_w19omx\dll\9612.ini
C:\tmph_w19omx\dll\9812.ini
C:\tmph_w19omx\dll\9844.ini
C:\tmph_w19omx\dll\9848.ini
C:\tmph_w19omx\bin\yZqOZxK.exe
C:\tmpeoix3ml5\dll\xAYiJbh.dll
C:\tmpeoix3ml5\bin\Procmon.exe
C:\tmph_w19omx\bin\geckodriver.exe
C:\tmph_w19omx\lib\__init__.py
C:\tmph_w19omx\modules\__init__.py
C:\tmph_w19omx\tests\test_analysis_packages.py
C:\tmph_w19omx\tests\test_analyzer.py
C:\tmph_w19omx\tests\test_analyzer_files.py
C:\tmph_w19omx\tests\test_analyzer_process_list.py
C:\tmph_w19omx\dll\capemon.dll
C:\tmpsv59hb03\bin\autoit3.exe
C:\tmph_w19omx\dll\wAImEkvO.dll
C:\tmpsv59hb03\bin\loader.exe
C:\tmpsv59hb03\bin\loader_x64.exe
C:\tmpsv59hb03\bin\mQGRlohr.exe
C:\tmph_w19omx\dll\capemon_x64.dll
C:\tmpsv59hb03\bin\ouqumVM.exe
C:\tmpsv59hb03\bin\procmon.pmc
C:\tmpsv59hb03\bin\psexec.exe
C:\tmpsv59hb03\data\msix.ps1
C:\tmpsv59hb03\dll\660.ini
C:\tmpsv59hb03\bin\signtool.exe
C:\tmph_w19omx\dll\QnAZYtX.dll
C:\FDwSxoT\memory\8492.dmp
C:\tmph_w19omx\bin\Procmon.exe
C:\tmpsv59hb03\lib\__init__.py
C:\tmpsv59hb03\modules\__init__.py
C:\tmpsv59hb03\tests\test_analysis_packages.py
C:\tmpsv59hb03\tests\test_analyzer.py
C:\tmpsv59hb03\tests\test_analyzer_files.py
C:\tmpsv59hb03\tests\test_analyzer_process_list.py
C:\tmpsv59hb03\bin\geckodriver.exe
C:\tmpugscyilj\bin\autoit3.exe
C:\tmpugscyilj\bin\CcLHXMEM.exe
C:\tmpugscyilj\bin\loader.exe
C:\tmpugscyilj\bin\loader_x64.exe
C:\tmpugscyilj\bin\pDCNQwo.exe
C:\tmpugscyilj\bin\PPLinject.exe
C:\tmpugscyilj\bin\PPLinject64.exe
C:\tmpsv59hb03\dll\capemon.dll
C:\tmpugscyilj\bin\procmon.pmc
C:\tmpsv59hb03\dll\JvQumA.dll
C:\tmpugscyilj\bin\signtool.exe
C:\tmpugscyilj\data\msix.ps1
C:\tmpugscyilj\dll\6156.ini
C:\tmpugscyilj\dll\672.ini
C:\tmpugscyilj\dll\8312.ini
C:\tmpugscyilj\bin\psexec.exe
C:\tmpsv59hb03\dll\capemon_x64.dll
C:\tmpsv59hb03\dll\LVCETPK.dll
C:\tmpsv59hb03\bin\Procmon.exe
C:\tmpugscyilj\lib\__init__.py
C:\tmpugscyilj\modules\__init__.py
C:\tmpugscyilj\tests\test_analysis_packages.py
C:\tmpugscyilj\tests\test_analyzer.py
C:\tmpugscyilj\tests\test_analyzer_files.py
C:\tmpugscyilj\tests\test_analyzer_process_list.py
C:\tmpugscyilj\bin\geckodriver.exe
C:\tmpxa6n6jlb\bin\autoit3.exe
C:\tmpxa6n6jlb\bin\loader.exe
C:\tmpxa6n6jlb\bin\loader_x64.exe
C:\tmpugscyilj\dll\capemon.dll
C:\tmpxa6n6jlb\bin\PPLinject.exe
C:\tmpxa6n6jlb\bin\PPLinject64.exe
C:\tmpxa6n6jlb\bin\procmon.pmc
C:\tmpxa6n6jlb\bin\psexec.exe
C:\tmpugscyilj\dll\lvnmWnN.dll
C:\tmpxa6n6jlb\bin\RGcTsqq.exe
C:\tmpxa6n6jlb\bin\signtool.exe
C:\tmpxa6n6jlb\data\msix.ps1
C:\tmpxa6n6jlb\dll\3512.ini
C:\tmpxa6n6jlb\dll\3936.ini
C:\tmpxa6n6jlb\dll\5156.ini
C:\tmpxa6n6jlb\dll\5360.ini
C:\tmpxa6n6jlb\dll\6488.ini
C:\tmpxa6n6jlb\dll\668.ini
C:\tmpxa6n6jlb\dll\780.ini
C:\tmpxa6n6jlb\bin\tEubcIZA.exe
C:\tmpugscyilj\dll\capemon_x64.dll
C:\tmpugscyilj\dll\cweSNMQP.dll
C:\tmpugscyilj\bin\Procmon.exe
C:\tmpxa6n6jlb\lib\__init__.py
C:\tmpxa6n6jlb\modules\__init__.py
C:\tmpxa6n6jlb\tests\test_analysis_packages.py
C:\tmpxa6n6jlb\tests\test_analyzer.py
C:\tmpxa6n6jlb\tests\test_analyzer_files.py
C:\tmpxa6n6jlb\tests\test_analyzer_process_list.py
C:\tmpxa6n6jlb\bin\geckodriver.exe
C:\tmpyhyv52bd\bin\bQqKdCRm.exe
C:\tmpxa6n6jlb\dll\capemon.dll
C:\tmpyhyv52bd\bin\autoit3.exe
C:\tmpyhyv52bd\bin\loader.exe
C:\tmpyhyv52bd\bin\loader_x64.exe
C:\tmpyhyv52bd\bin\PPLinject64.exe
C:\tmpyhyv52bd\bin\procmon.pmc
C:\tmpxa6n6jlb\dll\HiyzVY.dll
C:\tmpyhyv52bd\bin\rZsBKAg.exe
C:\tmpyhyv52bd\bin\psexec.exe
C:\tmpyhyv52bd\data\msix.ps1
C:\tmpyhyv52bd\dll\1528.ini
C:\tmpyhyv52bd\dll\3252.ini
C:\tmpyhyv52bd\dll\4024.ini
C:\tmpyhyv52bd\dll\604.ini
C:\tmpyhyv52bd\dll\612.ini
C:\tmpyhyv52bd\dll\6500.ini
C:\tmpyhyv52bd\dll\7020.ini
C:\tmpyhyv52bd\dll\7164.ini
C:\tmpyhyv52bd\dll\724.ini
C:\tmpyhyv52bd\dll\7348.ini
C:\tmpyhyv52bd\dll\7380.ini
C:\tmpyhyv52bd\dll\7508.ini
C:\tmpyhyv52bd\bin\signtool.exe
C:\tmpxa6n6jlb\dll\capemon_x64.dll
C:\tmpxa6n6jlb\dll\dZFlnqa.dll
C:\tmpxa6n6jlb\bin\Procmon.exe
C:\tmpyhyv52bd\lib\__init__.py
C:\tmpyhyv52bd\modules\__init__.py
C:\tmpyhyv52bd\tests\test_analysis_packages.py
C:\tmpyhyv52bd\tests\test_analyzer.py
C:\tmpyhyv52bd\tests\test_analyzer_files.py
C:\tmpyhyv52bd\tests\test_analyzer_process_list.py
C:\tmpyhyv52bd\bin\geckodriver.exe
C:\tmpyhyv52bd\dll\capemon.dll
C:\tmp_4c73x2e\bin\autoit3.exe
C:\tmp_4c73x2e\bin\FKHbweEn.exe
C:\tmp_4c73x2e\bin\loader_x64.exe
C:\tmp_4c73x2e\bin\loader.exe
C:\tmp_4c73x2e\bin\procmon.pmc
C:\tmp_4c73x2e\bin\psexec.exe
C:\tmp_4c73x2e\bin\signtool.exe
C:\tmpyhyv52bd\dll\PrQuPli.dll
C:\tmp_4c73x2e\data\msix.ps1
C:\tmp_4c73x2e\dll\660.ini
C:\tmp_4c73x2e\bin\wCjxibK.exe
C:\tmpyhyv52bd\dll\alQTNhGC.dll
C:\tmpyhyv52bd\dll\capemon_x64.dll
C:\tmpyhyv52bd\bin\Procmon.exe
C:\tmp_4c73x2e\lib\__init__.py
C:\tmp_4c73x2e\modules\__init__.py
C:\tmp_4c73x2e\tests\test_analysis_packages.py
C:\tmp_4c73x2e\tests\test_analyzer.py
C:\tmp_4c73x2e\tests\test_analyzer_files.py
C:\tmp_4c73x2e\tests\test_analyzer_process_list.py
C:\VhGXHyPr\CAPE\7652_14527944554381172024
C:\VhGXHyPr\CAPE\7652_152352750491172024
C:\VhGXHyPr\CAPE\7652_1803158564381172024
C:\VhGXHyPr\CAPE\7652_42672564381172024
C:\VhGXHyPr\tlsdump\tlsdump.log
C:\VJCYHvoxA\debugger\5436.log
C:\VJCYHvoxA\tlsdump\tlsdump.log
C:\wJvzAqbRj\tlsdump\tlsdump.log
C:\YtGTvE\CAPE\7728_174742063756428562024
C:\YtGTvE\CAPE\7728_184736053161228562024
C:\YtGTvE\CAPE\7728_223072853656428562024
C:\YtGTvE\CAPE\7728_23050856161228562024
C:\YtGTvE\CAPE\7728_255021073656428562024
C:\YtGTvE\CAPE\7728_48569953656428562024
C:\YtGTvE\CAPE\7728_565394456161228562024
C:\YtGTvE\tlsdump\tlsdump.log
C:\zKlZnVrs\CAPE\4908_2531685057591411472024
C:\zKlZnVrs\tlsdump\tlsdump.log
C:\Archivos de programa\7-Zip\Lang\af.txt
C:\Archivos de programa\7-Zip\Lang\an.txt
C:\Archivos de programa\7-Zip\Lang\ar.txt
C:\Archivos de programa\7-Zip\Lang\ast.txt
C:\Archivos de programa\7-Zip\Lang\az.txt
C:\Archivos de programa\7-Zip\Lang\ba.txt
C:\Archivos de programa\7-Zip\Lang\be.txt
C:\Archivos de programa\7-Zip\Lang\bg.txt
C:\Archivos de programa\7-Zip\Lang\bn.txt
C:\Archivos de programa\7-Zip\Lang\br.txt
C:\Archivos de programa\7-Zip\Lang\ca.txt
C:\Archivos de programa\7-Zip\Lang\co.txt
C:\Archivos de programa\7-Zip\Lang\cs.txt
C:\Archivos de programa\7-Zip\Lang\cy.txt
C:\Archivos de programa\7-Zip\Lang\da.txt
C:\Archivos de programa\7-Zip\Lang\de.txt
C:\Archivos de programa\7-Zip\Lang\el.txt
C:\Archivos de programa\7-Zip\Lang\en.ttt
C:\Archivos de programa\7-Zip\Lang\eo.txt
C:\Archivos de programa\7-Zip\Lang\es.txt
C:\Archivos de programa\7-Zip\Lang\et.txt
C:\Archivos de programa\7-Zip\Lang\eu.txt
C:\Archivos de programa\7-Zip\Lang\ext.txt
C:\Archivos de programa\7-Zip\Lang\fa.txt
C:\Archivos de programa\7-Zip\Lang\fi.txt
C:\Archivos de programa\7-Zip\Lang\fr.txt
C:\Archivos de programa\7-Zip\Lang\fur.txt
C:\Archivos de programa\7-Zip\Lang\fy.txt
C:\Archivos de programa\7-Zip\Lang\ga.txt
C:\Archivos de programa\7-Zip\Lang\gl.txt
C:\Archivos de programa\7-Zip\Lang\gu.txt
C:\Archivos de programa\7-Zip\Lang\he.txt
C:\Archivos de programa\7-Zip\Lang\hi.txt
C:\Archivos de programa\7-Zip\Lang\hr.txt
C:\Archivos de programa\7-Zip\Lang\hu.txt
C:\Archivos de programa\7-Zip\Lang\hy.txt
C:\Archivos de programa\7-Zip\Lang\id.txt
C:\Archivos de programa\7-Zip\Lang\io.txt
C:\Archivos de programa\7-Zip\Lang\is.txt
C:\Archivos de programa\7-Zip\Lang\it.txt
C:\tmp_4c73x2e\bin\geckodriver.exe
C:\Archivos de programa\7-Zip\Lang\ja.txt
C:\Archivos de programa\7-Zip\Lang\kaa.txt
C:\Archivos de programa\7-Zip\Lang\kab.txt
C:\Archivos de programa\7-Zip\Lang\kk.txt
C:\Archivos de programa\7-Zip\Lang\ko.txt
C:\Archivos de programa\7-Zip\Lang\ku-ckb.txt
C:\Archivos de programa\7-Zip\Lang\ku.txt
C:\Archivos de programa\7-Zip\Lang\ky.txt
C:\Archivos de programa\7-Zip\Lang\ka.txt
C:\Archivos de programa\7-Zip\Lang\lij.txt
C:\Archivos de programa\7-Zip\Lang\lt.txt
C:\Archivos de programa\7-Zip\Lang\lv.txt
C:\Archivos de programa\7-Zip\Lang\mn.txt
C:\Archivos de programa\7-Zip\Lang\mk.txt
C:\Archivos de programa\7-Zip\Lang\mng.txt
C:\Archivos de programa\7-Zip\Lang\mng2.txt
C:\Archivos de programa\7-Zip\Lang\mr.txt
C:\Archivos de programa\7-Zip\Lang\ms.txt
C:\Archivos de programa\7-Zip\Lang\nb.txt
C:\Archivos de programa\7-Zip\Lang\ne.txt
C:\Archivos de programa\7-Zip\Lang\pl.txt
C:\Archivos de programa\7-Zip\Lang\ps.txt
C:\Archivos de programa\7-Zip\Lang\pt-br.txt
C:\Archivos de programa\7-Zip\Lang\pt.txt
C:\Archivos de programa\7-Zip\Lang\ru.txt
C:\Archivos de programa\7-Zip\Lang\sa.txt
C:\Archivos de programa\7-Zip\Lang\sk.txt
C:\Archivos de programa\7-Zip\Lang\sr-spl.txt
C:\Archivos de programa\7-Zip\Lang\ta.txt
C:\Archivos de programa\7-Zip\Lang\th.txt
C:\Archivos de programa\7-Zip\Lang\sw.txt
C:\Archivos de programa\7-Zip\Lang\sv.txt
C:\Archivos de programa\7-Zip\Lang\va.txt
C:\Archivos de programa\7-Zip\Lang\vi.txt
C:\Archivos de programa\7-Zip\Lang\zh-tw.txt
C:\Archivos de programa\RUXIM\ar-SA\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\Assets\EOS.scale-100.png
C:\Archivos de programa\RUXIM\Assets\EOS.scale-140.png
C:\tmp_4c73x2e\dll\capemon_x64.dll
C:\Archivos de programa\RUXIM\Assets\MicrosoftLogoAndText.png
C:\Archivos de programa\RUXIM\Assets\Tile1.scale-100.png
C:\Archivos de programa\RUXIM\bg-bg\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\cs-cz\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\Assets\EOS.scale-200.png
C:\Archivos de programa\RUXIM\de-DE\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\el-gr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\en-gb\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\en-us\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\Assets\EOS.scale-180.png
C:\Archivos de programa\RUXIM\da-dk\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\es-es\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\es-MX\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\et-ee\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fi-fi\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fr-CA\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\he-IL\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\fr-FR\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\Assets\EOS.scale-240.png
C:\Archivos de programa\RUXIM\hr-hr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\hu-hu\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\it-it\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\ja-JP\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\ko-kr\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\lt-lt\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pl-pl\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\lv-lv\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pt-br\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\nb-no\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\nl-NL\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\pt-pt\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\sk-sk\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\uk-ua\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\zh-cn\RUXIMUXResources.dll.mui
C:\Archivos de programa\RUXIM\th-th\RUXIMUXResources.dll.mui
C:\Archivos de programa\VideoLAN\VLC\AUTHORS.txt
C:\Archivos de programa\VideoLAN\VLC\COPYING.txt
C:\Archivos de programa\RUXIM\zh-TW\RUXIMUXResources.dll.mui
C:\Archivos de programa\VideoLAN\VLC\New_Skins.url
C:\Archivos de programa\VideoLAN\VLC\libvlc.dll
C:\Archivos de programa\VideoLAN\VLC\README.txt
C:\Archivos de programa\VideoLAN\VLC\THANKS.txt
C:\Archivos de programa\VideoLAN\VLC\NEWS.txt
C:\Archivos de programa\VideoLAN\VLC\uninstall.log
C:\Archivos de programa\VideoLAN\VLC\VideoLAN Website.url
C:\Archivos de programa\VideoLAN\VLC\uninstall.exe
C:\Archivos de programa\VideoLAN\VLC\vlc-cache-gen.exe
C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
C:\Program Files (x86)\Google\GoogleUpdater\updater.log
C:\Archivos de programa\VideoLAN\VLC\axvlc.dll
C:\tmp_4c73x2e\bin\Procmon.exe
C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins
C:\Program Files (x86)\Microsoft\Edge\Edge.dat
C:\Archivos de programa\VideoLAN\VLC\vlc.exe
C:\Archivos de programa\VideoLAN\VLC\npvlc.dll
C:\Program Files (x86)\Google\GoogleUpdater\updater.log.old
C:\Archivos de programa\VideoLAN\VLC\libvlccore.dll
C:\ProgramData\Men\xfa Inicio\Programas\Google Chrome.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Microsoft Edge.lnk
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\ProgramData\Microsoft\Diagnosis\parse.dat
C:\ProgramData\Microsoft\Diagnosis\osver.txt
C:\ProgramData\Microsoft\MF\Active.GRL
C:\ProgramData\Microsoft\User Account Pictures\defaultuser0.dat
C:\ProgramData\Microsoft\User Account Pictures\pacop.dat
C:\ProgramData\Microsoft\User Account Pictures\user-32.png
C:\ProgramData\Microsoft\User Account Pictures\user-192.png
C:\ProgramData\Microsoft\User Account Pictures\guest.png
C:\ProgramData\Microsoft\User Account Pictures\user-40.png
C:\ProgramData\Microsoft\User Account Pictures\user-48.png
C:\ProgramData\Microsoft OneDrive\setup\refcount.ini
C:\ProgramData\Microsoft\User Account Pictures\user.png
C:\tmp228rx8rl\data\yara\AgentTesla.yar
C:\tmp228rx8rl\data\yara\AntiCuckoo.yar
C:\tmp228rx8rl\data\yara\Blister.yar
C:\tmp228rx8rl\data\yara\BuerLoader.yar
C:\tmp228rx8rl\data\yara\EmotetPacker.yar
C:\tmp228rx8rl\data\yara\Formbook.yar
C:\tmp228rx8rl\data\yara\GetTickCountAntiVM.yar
C:\tmp228rx8rl\data\yara\Guloader.yar
C:\tmp228rx8rl\data\yara\HeavensSyscall.yar
C:\tmp228rx8rl\data\yara\IcedID.yar
C:\tmp228rx8rl\data\yara\Latrodectus.yar
C:\tmp228rx8rl\data\yara\Lumma.yar
C:\tmp228rx8rl\data\yara\ModiLoader.yar
C:\tmp228rx8rl\data\yara\MysterySnail.yar
C:\tmp228rx8rl\data\yara\capemon.yac
C:\tmp228rx8rl\data\yara\NSIS.yar
C:\tmp228rx8rl\data\yara\Pafish.yar
C:\tmp228rx8rl\data\yara\Pikabot.yar
C:\tmp228rx8rl\data\yara\QakBot.yar
C:\tmp228rx8rl\data\yara\RdtscpAntiVM.yar
C:\tmp228rx8rl\data\yara\Rhadamanthys.yar
C:\ProgramData\Microsoft\User Account Pictures\guest.bmp
C:\tmp228rx8rl\data\yara\RisePro.yar
C:\tmp228rx8rl\data\yara\SingleStepAntiHook.yar
C:\ProgramData\Microsoft\User Account Pictures\user.bmp
C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat
C:\tmp228rx8rl\data\yara\Stealc.yar
C:\tmp228rx8rl\data\yara\Socks5Systemz.yar
C:\tmp228rx8rl\data\yara\Syscall.yar
C:\tmp228rx8rl\data\yara\UrsnifV3.yar
C:\tmp228rx8rl\data\yara\Zloader.yar
C:\tmp228rx8rl\lib\common\parse_pe.py
C:\tmp228rx8rl\lib\common\errors.py
C:\tmp228rx8rl\lib\common\zip_utils.py
C:\tmp228rx8rl\lib\core\privileges.py
C:\tmp228rx8rl\lib\core\packages.py
C:\tmp228rx8rl\lib\core\pipe.py
C:\tmp228rx8rl\modules\auxiliary\amsi_collector.py
C:\ProgramData\Package Cache\{7805B176-9059-45BD-8C4A-5B9EB0C2C387}v3.10.7882.0\launcher.msi
C:\tmp228rx8rl\modules\auxiliary\disguise.py
C:\tmp228rx8rl\modules\auxiliary\html_scraper.py
C:\tmp228rx8rl\modules\auxiliary\recentfiles.py
C:\tmp228rx8rl\modules\auxiliary\human.py
C:\tmp228rx8rl\modules\auxiliary\screenshots.py
C:\tmp228rx8rl\modules\auxiliary\pre_script.py
C:\tmp228rx8rl\modules\packages\access.py
C:\tmp228rx8rl\modules\packages\applet.py
C:\tmp228rx8rl\modules\packages\chrome.py
C:\tmp228rx8rl\modules\packages\doc.py
C:\tmp228rx8rl\modules\packages\eml.py
C:\tmp228rx8rl\modules\packages\exe.py
C:\tmp228rx8rl\modules\auxiliary\__init__.py
C:\tmp228rx8rl\modules\packages\doc2016.py
C:\tmp228rx8rl\modules\packages\firefox.py
C:\tmp228rx8rl\modules\packages\hta.py
C:\tmp228rx8rl\modules\packages\js.py
C:\tmp228rx8rl\modules\packages\inp.py
C:\tmp228rx8rl\modules\packages\msix.py
C:\tmp228rx8rl\modules\packages\nsis.py
C:\tmp228rx8rl\modules\packages\ppt.py
C:\tmp228rx8rl\modules\packages\one.py
C:\tmp228rx8rl\modules\packages\rar.py
C:\tmp228rx8rl\modules\packages\python.py
C:\tmp228rx8rl\modules\packages\regsvr.py
C:\tmp228rx8rl\modules\packages\Shellcode-Unpacker.py
C:\tmp228rx8rl\modules\packages\swf.py
C:\tmp228rx8rl\modules\packages\Unpacker.py
C:\tmp228rx8rl\modules\packages\xls.py
C:\tmp228rx8rl\modules\packages\xls2016.py
C:\tmp228rx8rl\modules\packages\xps.py
C:\tmp228rx8rl\modules\packages\xslt.py
C:\tmp228rx8rl\modules\packages\zip.py
C:\tmp228rx8rl\modules\packages\zip_compound.py
C:\tmp228rx8rl\modules\packages\__init__.py
C:\tmp228rx8rl\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\data\yara\AgentTesla.yar
C:\tmp3bs9izg4\data\yara\AntiCuckoo.yar
C:\tmp3bs9izg4\data\yara\Al-khaser.yar
C:\tmp3bs9izg4\data\yara\BumbleBee.yar
C:\tmp3bs9izg4\data\yara\capemon.yac
C:\tmp3bs9izg4\data\yara\BuerLoader.yar
C:\tmp3bs9izg4\data\yara\DarkGate.yar
C:\tmp3bs9izg4\data\yara\EmotetPacker.yar
C:\tmp3bs9izg4\data\yara\Formbook.yar
C:\tmp228rx8rl\modules\packages\js_antivm.py
C:\tmp228rx8rl\modules\packages\Unpacker_ps1.py
C:\tmp3bs9izg4\data\yara\IcedID.yar
C:\tmp228rx8rl\modules\packages\wsf.py
C:\tmp3bs9izg4\data\yara\Latrodectus.yar
C:\tmp3bs9izg4\data\yara\Lumma.yar
C:\tmp3bs9izg4\data\yara\MysterySnail.yar
C:\tmp3bs9izg4\data\yara\Pikabot.yar
C:\tmp3bs9izg4\data\yara\RdtscpAntiVM.yar
C:\tmp3bs9izg4\data\yara\Rhadamanthys.yar
C:\tmp3bs9izg4\data\yara\HeavensSyscall.yar
C:\tmp3bs9izg4\data\yara\NSIS.yar
C:\tmp228rx8rl\modules\packages\Unpacker_zip.py
C:\tmp3bs9izg4\lib\core\packages.py
C:\tmp3bs9izg4\lib\core\privileges.py
C:\tmp3bs9izg4\lib\core\__init__.py
C:\tmp3bs9izg4\modules\auxiliary\amsi_collector.py
C:\tmp3bs9izg4\modules\auxiliary\autoruns.py
C:\tmp3bs9izg4\modules\auxiliary\browser.py
C:\tmp3bs9izg4\modules\auxiliary\curtain.py
C:\tmp3bs9izg4\modules\auxiliary\digisig.py
C:\tmp3bs9izg4\modules\auxiliary\during_script.py
C:\tmp3bs9izg4\modules\auxiliary\disguise.py
C:\tmp3bs9izg4\modules\auxiliary\filepickup.py
C:\tmp3bs9izg4\modules\auxiliary\evtx.py
C:\tmp3bs9izg4\modules\auxiliary\html_scraper.py
C:\tmp3bs9izg4\modules\auxiliary\permissions.py
C:\tmp3bs9izg4\modules\auxiliary\pre_script.py
C:\tmp3bs9izg4\modules\auxiliary\amsi.py
C:\tmp3bs9izg4\modules\auxiliary\procmon.py
C:\tmp3bs9izg4\modules\auxiliary\recentfiles.py
C:\tmp3bs9izg4\modules\auxiliary\human.py
C:\tmp3bs9izg4\modules\auxiliary\__init__.py
C:\tmp3bs9izg4\modules\packages\access.py
C:\tmp3bs9izg4\modules\auxiliary\tlsdump.py
C:\tmp3bs9izg4\modules\auxiliary\usage.py
C:\tmp3bs9izg4\modules\packages\applet.py
C:\tmp3bs9izg4\modules\packages\archive.py
C:\tmp3bs9izg4\data\yara\Pafish.yar
C:\tmp3bs9izg4\lib\core\pipe.py
C:\tmp3bs9izg4\modules\packages\autoit.py
C:\tmp3bs9izg4\modules\packages\doc.py
C:\tmp3bs9izg4\modules\packages\doc2016.py
C:\tmp3bs9izg4\modules\packages\doc_antivm.py
C:\tmp3bs9izg4\modules\packages\edge.py
C:\tmp3bs9izg4\modules\packages\eml.py
C:\tmp3bs9izg4\modules\packages\exe.py
C:\tmp3bs9izg4\modules\packages\firefox.py
C:\tmp3bs9izg4\modules\packages\generic.py
C:\tmp3bs9izg4\modules\packages\hta.py
C:\tmp3bs9izg4\modules\packages\hwp.py
C:\tmp3bs9izg4\modules\packages\ichitaro.py
C:\tmp3bs9izg4\modules\packages\ie.py
C:\tmp3bs9izg4\modules\packages\inf.py
C:\tmp3bs9izg4\modules\packages\inp.py
C:\tmp3bs9izg4\modules\packages\jar.py
C:\tmp3bs9izg4\modules\packages\js.py
C:\tmp3bs9izg4\modules\packages\js_antivm.py
C:\tmp3bs9izg4\modules\packages\lnk.py
C:\tmp3bs9izg4\modules\packages\mht.py
C:\tmp3bs9izg4\modules\packages\msbuild.py
C:\tmp3bs9izg4\modules\packages\msg.py
C:\tmp3bs9izg4\modules\packages\msi.py
C:\tmp3bs9izg4\modules\packages\msix.py
C:\tmp3bs9izg4\modules\packages\nsis.py
C:\tmp3bs9izg4\modules\packages\ollydbg.py
C:\tmp3bs9izg4\modules\packages\one.py
C:\tmp3bs9izg4\modules\packages\pdf.py
C:\tmp3bs9izg4\modules\packages\ppt.py
C:\tmp3bs9izg4\modules\packages\ppt2016.py
C:\tmp3bs9izg4\modules\packages\ps1.py
C:\tmp3bs9izg4\modules\packages\pub.py
C:\tmp3bs9izg4\modules\packages\pub2016.py
C:\tmp3bs9izg4\modules\packages\rar.py
C:\tmp3bs9izg4\modules\packages\reg.py
C:\tmp3bs9izg4\modules\packages\regsvr.py
C:\tmp3bs9izg4\modules\packages\sct.py
C:\tmp3bs9izg4\modules\packages\cpl.py
C:\tmp3bs9izg4\modules\packages\dll.py
C:\tmp3bs9izg4\modules\packages\Shellcode-Unpacker.py
C:\tmp3bs9izg4\modules\packages\Shellcode.py
C:\tmp3bs9izg4\modules\packages\Shellcode_x64.py
C:\tmp3bs9izg4\modules\packages\swf.py
C:\tmp3bs9izg4\modules\packages\Unpacker.py
C:\tmp3bs9izg4\modules\packages\Unpacker_dll.py
C:\tmp3bs9izg4\modules\packages\Unpacker_js.py
C:\tmp3bs9izg4\modules\packages\Unpacker_ps1.py
C:\tmp3bs9izg4\modules\packages\Unpacker_regsvr.py
C:\tmp3bs9izg4\modules\packages\Unpacker_zip.py
C:\tmp3bs9izg4\modules\packages\vawtrak.py
C:\tmp3bs9izg4\modules\packages\vbejse.py
C:\tmp3bs9izg4\modules\packages\vbs.py
C:\tmp3bs9izg4\modules\packages\wsf.py
C:\tmp3bs9izg4\modules\packages\xls.py
C:\tmp3bs9izg4\modules\packages\xls2016.py
C:\tmp3bs9izg4\modules\packages\xps.py
C:\tmp3bs9izg4\modules\packages\xslt.py
C:\tmp3bs9izg4\modules\packages\zip.py
C:\tmp3bs9izg4\modules\packages\zip_compound.py
C:\tmp3bs9izg4\modules\packages\__init__.py
C:\tmp3bs9izg4\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\data\yara\AgentTesla.yar
C:\tmp3ljmycja\data\yara\Al-khaser.yar
C:\tmp3ljmycja\data\yara\AntiCuckoo.yar
C:\tmp3ljmycja\data\yara\Blister.yar
C:\tmp3ljmycja\data\yara\BuerLoader.yar
C:\tmp3ljmycja\data\yara\BumbleBee.yar
C:\tmp3ljmycja\data\yara\CargoBayLoader.yar
C:\tmp3ljmycja\data\yara\DarkGate.yar
C:\tmp3ljmycja\data\yara\DarkGateLoader.yar
C:\tmp3ljmycja\data\yara\DoomedLoader.yar
C:\tmp3ljmycja\data\yara\DridexLoader.yar
C:\tmp3ljmycja\data\yara\EmotetPacker.yar
C:\tmp3ljmycja\data\yara\Formbook.yar
C:\tmp3ljmycja\data\yara\GetTickCountAntiVM.yar
C:\tmp3ljmycja\data\yara\Guloader.yar
C:\tmp3ljmycja\data\yara\HeavensSyscall.yar
C:\tmp3ljmycja\data\yara\IcedID.yar
C:\tmp3ljmycja\data\yara\Latrodectus.yar
C:\tmp3ljmycja\data\yara\Lumma.yar
C:\tmp3ljmycja\data\yara\ModiLoader.yar
C:\tmp3ljmycja\data\yara\MysterySnail.yar
C:\tmp3ljmycja\data\yara\NSIS.yar
C:\tmp3ljmycja\data\yara\Pafish.yar
C:\tmp3ljmycja\data\yara\Pikabot.yar
C:\tmp3ljmycja\data\yara\QakBot.yar
C:\tmp3ljmycja\data\yara\RdtscpAntiVM.yar
C:\tmp3ljmycja\data\yara\Rhadamanthys.yar
C:\tmp3ljmycja\data\yara\RisePro.yar
C:\tmp3ljmycja\data\yara\SingleStepAntiHook.yar
C:\tmp3ljmycja\data\yara\SmokeLoader.yar
C:\tmp3ljmycja\data\yara\Socks5Systemz.yar
C:\tmp3ljmycja\data\yara\Stealc.yar
C:\tmp3bs9izg4\modules\packages\service_dll.py
C:\tmp3ljmycja\data\yara\Syscall.yar
C:\tmp3ljmycja\data\yara\UPX.yar
C:\tmp3ljmycja\data\yara\VBCrypter.yar
C:\tmp3ljmycja\data\yara\XWorm.yar
C:\tmp3ljmycja\data\yara\Zloader.yar
C:\tmp3ljmycja\data\yara\UrsnifV3.yar
C:\tmp3ljmycja\lib\api\process.py
C:\tmp3ljmycja\lib\api\utils.py
C:\tmp3ljmycja\lib\api\__init__.py
C:\tmp3ljmycja\lib\common\abstracts.py
C:\tmp3ljmycja\lib\common\common.py
C:\tmp3ljmycja\lib\common\constants.py
C:\tmp3ljmycja\lib\common\defines.py
C:\tmp3ljmycja\lib\api\screenshot.py
C:\tmp3ljmycja\lib\common\exceptions.py
C:\tmp3ljmycja\lib\common\hashing.py
C:\tmp3ljmycja\lib\common\errors.py
C:\tmp3ljmycja\lib\common\parse_pe.py
C:\tmp3ljmycja\lib\common\rand.py
C:\tmp3ljmycja\lib\common\registry.py
C:\tmp3ljmycja\lib\common\results.py
C:\tmp3ljmycja\lib\common\__init__.py
C:\tmp3ljmycja\lib\common\zip_utils.py
C:\tmp3ljmycja\lib\core\compound.py
C:\tmp3ljmycja\lib\core\config.py
C:\tmp3ljmycja\lib\core\log.py
C:\tmp3ljmycja\lib\core\privileges.py
C:\tmp3ljmycja\lib\core\pipe.py
C:\tmp3ljmycja\lib\core\startup.py
C:\tmp3ljmycja\lib\core\__init__.py
C:\tmp3ljmycja\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\amsi_collector.py
C:\tmp3ljmycja\modules\auxiliary\autoruns.py
C:\tmp3ljmycja\modules\auxiliary\browser.py
C:\tmp3ljmycja\modules\auxiliary\curtain.py
C:\tmp3ljmycja\modules\auxiliary\amsi.py
C:\tmp3ljmycja\modules\auxiliary\digisig.py
C:\tmp3ljmycja\modules\auxiliary\during_script.py
C:\tmp3ljmycja\modules\auxiliary\disguise.py
C:\tmp3ljmycja\modules\auxiliary\filepickup.py
C:\tmp3ljmycja\modules\auxiliary\html_scraper.py
C:\tmp3ljmycja\modules\auxiliary\evtx.py
C:\tmp3ljmycja\modules\auxiliary\permissions.py
C:\tmp3ljmycja\modules\auxiliary\human.py
C:\tmp3ljmycja\modules\auxiliary\pre_script.py
C:\tmp3ljmycja\modules\auxiliary\procmon.py
C:\tmp3ljmycja\modules\auxiliary\recentfiles.py
C:\tmp3ljmycja\modules\auxiliary\screenshots.py
C:\tmp3ljmycja\modules\auxiliary\sysmon.py
C:\tmp3ljmycja\modules\auxiliary\tlsdump.py
C:\tmp3ljmycja\modules\auxiliary\__init__.py
C:\tmp3ljmycja\modules\auxiliary\usage.py
C:\tmp3ljmycja\modules\packages\access.py
C:\tmp3ljmycja\modules\packages\applet.py
C:\tmp3ljmycja\modules\packages\autoit.py
C:\tmp3ljmycja\modules\packages\archive.py
C:\tmp3ljmycja\modules\packages\chm.py
C:\tmp3ljmycja\modules\packages\chrome.py
C:\tmp3ljmycja\modules\packages\chromium.py
C:\tmp3ljmycja\modules\packages\cpl.py
C:\tmp3ljmycja\modules\packages\doc.py
C:\tmp3ljmycja\modules\packages\doc2016.py
C:\tmp3ljmycja\modules\packages\doc_antivm.py
C:\tmp3ljmycja\modules\packages\edge.py
C:\tmp3ljmycja\modules\packages\exe.py
C:\tmp3bs9izg4\modules\packages\service.py
C:\tmp3ljmycja\modules\packages\firefox.py
C:\tmp3ljmycja\modules\packages\hta.py
C:\tmp3ljmycja\modules\packages\inf.py
C:\tmp3ljmycja\modules\packages\inp.py
C:\tmp3ljmycja\modules\packages\jar.py
C:\tmp3ljmycja\modules\packages\js.py
C:\tmp3ljmycja\modules\packages\js_antivm.py
C:\tmp3ljmycja\modules\packages\lnk.py
C:\tmp3ljmycja\modules\packages\mht.py
C:\tmp3ljmycja\modules\packages\msbuild.py
C:\tmp3ljmycja\modules\packages\generic.py
C:\tmp3ljmycja\modules\packages\msg.py
C:\tmp3ljmycja\modules\packages\msix.py
C:\tmp3ljmycja\modules\packages\hwp.py
C:\tmp3ljmycja\modules\packages\msi.py
C:\tmp3ljmycja\modules\packages\one.py
C:\tmp3ljmycja\modules\packages\pdf.py
C:\tmp3ljmycja\modules\packages\ppt2016.py
C:\tmp3ljmycja\modules\packages\pub.py
C:\tmp3ljmycja\modules\packages\pub2016.py
C:\tmp3ljmycja\modules\packages\ps1.py
C:\tmp3ljmycja\modules\packages\python.py
C:\tmp3ljmycja\modules\packages\reg.py
C:\tmp3ljmycja\modules\packages\rar.py
C:\tmp3ljmycja\modules\packages\service.py
C:\tmp3ljmycja\modules\packages\sct.py
C:\tmp3ljmycja\modules\packages\service_dll.py
C:\tmp3ljmycja\modules\packages\Shellcode.py
C:\tmp3ljmycja\modules\packages\Shellcode_x64.py
C:\tmp3ljmycja\modules\packages\swf.py
C:\tmp3ljmycja\modules\packages\Unpacker.py
C:\tmp3ljmycja\modules\packages\Unpacker_dll.py
C:\tmp3ljmycja\modules\packages\Unpacker_js.py
C:\tmp3ljmycja\modules\packages\Unpacker_ps1.py
C:\tmp3ljmycja\modules\packages\Unpacker_regsvr.py
C:\tmp3ljmycja\modules\packages\vawtrak.py
C:\tmp3ljmycja\modules\packages\vbs.py
C:\tmp3ljmycja\modules\packages\xls.py
C:\tmp3ljmycja\modules\packages\xps.py
C:\tmp3ljmycja\modules\packages\xslt.py
C:\tmp3bs9izg4\modules\packages\chrome.py
C:\tmp3ljmycja\modules\packages\zip_compound.py
C:\tmp3ljmycja\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\data\yara\AgentTesla.yar
C:\tmpb9ol310j\data\yara\AntiCuckoo.yar
C:\tmp3ljmycja\modules\packages\__init__.py
C:\tmpb9ol310j\data\yara\BumbleBee.yar
C:\tmpb9ol310j\data\yara\capemon.yac
C:\tmp3ljmycja\modules\packages\zip.py
C:\tmpb9ol310j\data\yara\DarkGateLoader.yar
C:\tmpb9ol310j\data\yara\DoomedLoader.yar
C:\tmpb9ol310j\data\yara\DridexLoader.yar
C:\tmpb9ol310j\data\yara\EmotetPacker.yar
C:\tmpb9ol310j\data\yara\Formbook.yar
C:\tmpb9ol310j\data\yara\GetTickCountAntiVM.yar
C:\tmpb9ol310j\data\yara\Latrodectus.yar
C:\tmpb9ol310j\data\yara\MysterySnail.yar
C:\tmpb9ol310j\data\yara\ModiLoader.yar
C:\tmpb9ol310j\data\yara\NSIS.yar
C:\tmpb9ol310j\data\yara\IcedID.yar
C:\tmpb9ol310j\data\yara\Lumma.yar
C:\tmpb9ol310j\data\yara\RdtscpAntiVM.yar
C:\tmpb9ol310j\data\yara\Rhadamanthys.yar
C:\tmpb9ol310j\data\yara\Stealc.yar
C:\tmpb9ol310j\data\yara\Syscall.yar
C:\tmpb9ol310j\data\yara\UPX.yar
C:\tmpb9ol310j\data\yara\UrsnifV3.yar
C:\tmpb9ol310j\data\yara\VBCrypter.yar
C:\tmpb9ol310j\data\yara\XWorm.yar
C:\tmpb9ol310j\data\yara\SmokeLoader.yar
C:\tmpb9ol310j\data\yara\QakBot.yar
C:\tmpb9ol310j\data\yara\RisePro.yar
C:\tmpb9ol310j\lib\api\screenshot.py
C:\tmpb9ol310j\lib\api\__init__.py
C:\tmpb9ol310j\lib\api\utils.py
C:\tmpb9ol310j\lib\common\common.py
C:\tmpb9ol310j\lib\common\constants.py
C:\tmpb9ol310j\lib\api\process.py
C:\tmpb9ol310j\lib\common\abstracts.py
C:\tmpb9ol310j\lib\common\defines.py
C:\tmpb9ol310j\lib\common\exceptions.py
C:\tmpb9ol310j\lib\common\hashing.py
C:\tmpb9ol310j\lib\common\parse_pe.py
C:\tmpb9ol310j\lib\common\rand.py
C:\tmpb9ol310j\lib\common\registry.py
C:\tmpb9ol310j\lib\common\results.py
C:\tmpb9ol310j\lib\common\__init__.py
C:\tmpb9ol310j\lib\core\compound.py
C:\tmpb9ol310j\lib\common\errors.py
C:\tmpb9ol310j\lib\common\zip_utils.py
C:\tmpb9ol310j\lib\core\config.py
C:\tmpb9ol310j\lib\core\log.py
C:\tmpb9ol310j\lib\core\packages.py
C:\tmpb9ol310j\lib\core\pipe.py
C:\tmpb9ol310j\lib\core\__init__.py
C:\tmpb9ol310j\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\core\privileges.py
C:\tmpb9ol310j\lib\core\startup.py
C:\tmpb9ol310j\modules\auxiliary\amsi_collector.py
C:\tmpb9ol310j\modules\auxiliary\browser.py
C:\tmpb9ol310j\modules\auxiliary\autoruns.py
C:\tmpb9ol310j\modules\auxiliary\curtain.py
C:\tmpb9ol310j\modules\auxiliary\digisig.py
C:\tmpb9ol310j\modules\auxiliary\during_script.py
C:\tmpb9ol310j\modules\auxiliary\disguise.py
C:\tmpb9ol310j\modules\auxiliary\filepickup.py
C:\tmpb9ol310j\modules\auxiliary\evtx.py
C:\tmpb9ol310j\modules\auxiliary\amsi.py
C:\tmpb9ol310j\modules\auxiliary\html_scraper.py
C:\tmpb9ol310j\modules\auxiliary\permissions.py
C:\tmpb9ol310j\modules\auxiliary\pre_script.py
C:\tmpb9ol310j\modules\auxiliary\procmon.py
C:\tmpb9ol310j\modules\auxiliary\recentfiles.py
C:\tmpb9ol310j\modules\auxiliary\screenshots.py
C:\tmpb9ol310j\modules\auxiliary\tlsdump.py
C:\tmpb9ol310j\modules\auxiliary\sysmon.py
C:\tmpb9ol310j\modules\auxiliary\__init__.py
C:\tmpb9ol310j\modules\packages\access.py
C:\tmpb9ol310j\modules\auxiliary\usage.py
C:\tmpb9ol310j\modules\packages\autoit.py
C:\tmpb9ol310j\modules\packages\chm.py
C:\tmpb9ol310j\modules\packages\archive.py
C:\tmpb9ol310j\modules\packages\chrome.py
C:\tmpb9ol310j\modules\packages\chromium.py
C:\tmpb9ol310j\modules\packages\cpl.py
C:\tmpb9ol310j\modules\packages\doc.py
C:\tmpb9ol310j\modules\packages\doc2016.py
C:\tmpb9ol310j\modules\packages\dll.py
C:\tmpb9ol310j\modules\packages\doc_antivm.py
C:\tmpb9ol310j\modules\packages\edge.py
C:\tmpb9ol310j\modules\packages\eml.py
C:\tmpb9ol310j\modules\packages\exe.py
C:\tmpb9ol310j\modules\packages\firefox.py
C:\tmpb9ol310j\modules\packages\hwp.py
C:\tmpb9ol310j\modules\packages\ichitaro.py
C:\tmpb9ol310j\modules\packages\ie.py
C:\tmpb9ol310j\modules\packages\inf.py
C:\tmpb9ol310j\modules\packages\inp.py
C:\tmpb9ol310j\modules\packages\jar.py
C:\tmpb9ol310j\modules\packages\js.py
C:\tmpb9ol310j\modules\packages\js_antivm.py
C:\tmpb9ol310j\modules\packages\lnk.py
C:\tmpb9ol310j\modules\packages\mht.py
C:\tmpb9ol310j\modules\packages\msbuild.py
C:\tmpb9ol310j\modules\packages\msg.py
C:\tmpb9ol310j\modules\packages\msi.py
C:\tmpb9ol310j\modules\packages\msix.py
C:\tmpb9ol310j\modules\packages\nsis.py
C:\tmpb9ol310j\modules\packages\ollydbg.py
C:\tmpb9ol310j\modules\packages\ppt.py
C:\tmpb9ol310j\modules\packages\ppt2016.py
C:\tmpb9ol310j\modules\packages\ps1.py
C:\tmpb9ol310j\modules\packages\pub.py
C:\tmpb9ol310j\modules\packages\pub2016.py
C:\tmpb9ol310j\modules\packages\python.py
C:\tmpb9ol310j\modules\packages\reg.py
C:\tmpb9ol310j\modules\packages\regsvr.py
C:\tmpb9ol310j\modules\packages\rar.py
C:\tmpb9ol310j\modules\packages\sct.py
C:\tmpb9ol310j\modules\packages\service.py
C:\tmpb9ol310j\modules\packages\Shellcode-Unpacker.py
C:\tmpb9ol310j\modules\packages\service_dll.py
C:\tmpb9ol310j\modules\packages\Shellcode.py
C:\tmpb9ol310j\modules\packages\Shellcode_x64.py
C:\tmpb9ol310j\modules\packages\swf.py
C:\tmpb9ol310j\modules\packages\Unpacker.py
C:\tmpb9ol310j\modules\packages\Unpacker_dll.py
C:\tmpb9ol310j\modules\packages\Unpacker_js.py
C:\tmpb9ol310j\modules\packages\Unpacker_ps1.py
C:\tmpb9ol310j\modules\packages\Unpacker_zip.py
C:\tmpb9ol310j\modules\packages\vawtrak.py
C:\tmpb9ol310j\modules\packages\vbejse.py
C:\tmpb9ol310j\modules\packages\vbs.py
C:\tmpb9ol310j\modules\packages\wsf.py
C:\tmpb9ol310j\modules\packages\xls.py
C:\tmpb9ol310j\modules\packages\xls2016.py
C:\tmpb9ol310j\modules\packages\xps.py
C:\tmpb9ol310j\modules\packages\xslt.py
C:\tmpb9ol310j\modules\packages\zip.py
C:\tmp3bs9izg4\modules\packages\python.py
C:\tmpb9ol310j\data\yara\Zloader.yar
C:\tmpb9ol310j\modules\packages\__init__.py
C:\tmpcynaajs6\data\yara\AntiCuckoo.yar
C:\tmpcynaajs6\data\yara\BumbleBee.yar
C:\tmpcynaajs6\data\yara\capemon.yac
C:\tmpcynaajs6\data\yara\CargoBayLoader.yar
C:\tmpcynaajs6\data\yara\DarkGateLoader.yar
C:\tmpcynaajs6\data\yara\DridexLoader.yar
C:\tmpcynaajs6\data\yara\EmotetPacker.yar
C:\tmpcynaajs6\data\yara\Formbook.yar
C:\tmpcynaajs6\data\yara\GetTickCountAntiVM.yar
C:\tmpcynaajs6\data\yara\Guloader.yar
C:\tmpcynaajs6\data\yara\HeavensSyscall.yar
C:\tmpcynaajs6\data\yara\IcedID.yar
C:\tmpcynaajs6\data\yara\Blister.yar
C:\tmpcynaajs6\data\yara\DarkGate.yar
C:\tmpcynaajs6\data\yara\DoomedLoader.yar
C:\tmpcynaajs6\data\yara\Latrodectus.yar
C:\tmp3bs9izg4\modules\packages\chromium.py
C:\tmpcynaajs6\data\yara\Lumma.yar
C:\tmpcynaajs6\data\yara\NSIS.yar
C:\tmpcynaajs6\data\yara\Pafish.yar
C:\tmpcynaajs6\data\yara\Pikabot.yar
C:\tmpcynaajs6\data\yara\QakBot.yar
C:\tmpcynaajs6\data\yara\Rhadamanthys.yar
C:\tmpcynaajs6\data\yara\SingleStepAntiHook.yar
C:\tmpcynaajs6\data\yara\Socks5Systemz.yar
C:\tmpcynaajs6\data\yara\Syscall.yar
C:\tmpcynaajs6\data\yara\RisePro.yar
C:\tmpcynaajs6\data\yara\UrsnifV3.yar
C:\tmpcynaajs6\data\yara\Zloader.yar
C:\tmpcynaajs6\data\yara\XWorm.yar
C:\tmpcynaajs6\lib\api\utils.py
C:\tmpcynaajs6\lib\common\abstracts.py
C:\tmpcynaajs6\lib\common\exceptions.py
C:\tmpcynaajs6\lib\core\compound.py
C:\tmpcynaajs6\lib\common\__init__.py
C:\tmpcynaajs6\lib\common\hashing.py
C:\tmpcynaajs6\lib\common\zip_utils.py
C:\tmpcynaajs6\lib\common\results.py
C:\tmpcynaajs6\lib\core\privileges.py
C:\tmpcynaajs6\lib\core\packages.py
C:\tmpcynaajs6\lib\core\config.py
C:\tmpcynaajs6\lib\core\log.py
C:\tmpcynaajs6\modules\auxiliary\autoruns.py
C:\tmpcynaajs6\modules\auxiliary\browser.py
C:\tmpcynaajs6\modules\auxiliary\during_script.py
C:\tmpcynaajs6\modules\auxiliary\amsi.py
C:\tmpcynaajs6\modules\auxiliary\digisig.py
C:\tmpcynaajs6\modules\auxiliary\html_scraper.py
C:\tmpcynaajs6\modules\auxiliary\human.py
C:\tmpcynaajs6\modules\auxiliary\disguise.py
C:\tmpcynaajs6\modules\auxiliary\pre_script.py
C:\tmpcynaajs6\modules\auxiliary\filepickup.py
C:\tmpcynaajs6\modules\auxiliary\permissions.py
C:\tmpcynaajs6\modules\auxiliary\recentfiles.py
C:\tmpcynaajs6\modules\auxiliary\procmon.py
C:\tmpcynaajs6\modules\auxiliary\evtx.py
C:\tmpcynaajs6\modules\auxiliary\sysmon.py
C:\tmpcynaajs6\modules\packages\access.py
C:\tmpcynaajs6\modules\packages\archive.py
C:\tmpcynaajs6\modules\packages\chrome.py
C:\tmpcynaajs6\modules\packages\applet.py
C:\tmpcynaajs6\modules\packages\chm.py
C:\tmpcynaajs6\modules\packages\chromium.py
C:\tmpcynaajs6\modules\packages\doc.py
C:\tmpcynaajs6\modules\packages\cpl.py
C:\tmpcynaajs6\modules\packages\doc2016.py
C:\tmpcynaajs6\modules\packages\eml.py
C:\tmpcynaajs6\modules\packages\exe.py
C:\tmpcynaajs6\modules\packages\firefox.py
C:\tmpcynaajs6\modules\packages\hta.py
C:\tmpcynaajs6\modules\packages\ichitaro.py
C:\tmpcynaajs6\modules\packages\ie.py
C:\tmpcynaajs6\modules\packages\inf.py
C:\tmpcynaajs6\modules\packages\inp.py
C:\tmpcynaajs6\modules\packages\jar.py
C:\tmpcynaajs6\modules\packages\js.py
C:\tmpcynaajs6\modules\packages\js_antivm.py
C:\tmpcynaajs6\modules\packages\lnk.py
C:\tmpcynaajs6\modules\packages\mht.py
C:\tmpcynaajs6\modules\auxiliary\amsi_collector.py
C:\tmpcynaajs6\modules\packages\dll.py
C:\tmpcynaajs6\modules\packages\wsf.py
C:\tmpcynaajs6\modules\packages\vbejse.py
C:\tmpcynaajs6\modules\packages\msix.py
C:\tmpcynaajs6\modules\packages\doc_antivm.py
C:\tmpcynaajs6\modules\packages\edge.py
C:\tmpcynaajs6\modules\packages\xslt.py
C:\tmpcynaajs6\modules\packages\zip_compound.py
C:\tmpcynaajs6\modules\packages\zip.py
C:\tmpcynaajs6\modules\packages\xps.py
C:\tmpcynaajs6\modules\packages\__init__.py
C:\tmpcynaajs6\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\data\yara\AgentTesla.yar
C:\tmpd5tr1_rv\data\yara\Al-khaser.yar
C:\tmpd5tr1_rv\data\yara\AntiCuckoo.yar
C:\tmpd5tr1_rv\data\yara\Blister.yar
C:\tmpd5tr1_rv\data\yara\BuerLoader.yar
C:\tmpd5tr1_rv\data\yara\BumbleBee.yar
C:\tmpd5tr1_rv\data\yara\CargoBayLoader.yar
C:\tmpd5tr1_rv\data\yara\DarkGate.yar
C:\tmpd5tr1_rv\data\yara\DarkGateLoader.yar
C:\tmpd5tr1_rv\data\yara\DoomedLoader.yar
C:\tmpd5tr1_rv\data\yara\DridexLoader.yar
C:\tmpd5tr1_rv\data\yara\EmotetPacker.yar
C:\tmpd5tr1_rv\data\yara\HeavensSyscall.yar
C:\tmpd5tr1_rv\data\yara\Guloader.yar
C:\tmpd5tr1_rv\data\yara\GetTickCountAntiVM.yar
C:\tmpd5tr1_rv\data\yara\Lumma.yar
C:\tmpd5tr1_rv\data\yara\Latrodectus.yar
C:\tmpd5tr1_rv\data\yara\MysterySnail.yar
C:\tmpd5tr1_rv\data\yara\RdtscpAntiVM.yar
C:\tmpd5tr1_rv\data\yara\SmokeLoader.yar
C:\tmpd5tr1_rv\data\yara\Pafish.yar
C:\tmpd5tr1_rv\data\yara\Stealc.yar
C:\tmpd5tr1_rv\data\yara\VBCrypter.yar
C:\tmpd5tr1_rv\data\yara\UrsnifV3.yar
C:\tmpd5tr1_rv\data\yara\XWorm.yar
C:\tmpd5tr1_rv\lib\api\screenshot.py
C:\tmpd5tr1_rv\lib\api\utils.py
C:\tmpd5tr1_rv\lib\api\__init__.py
C:\tmpd5tr1_rv\lib\api\process.py
C:\tmpd5tr1_rv\lib\common\abstracts.py
C:\tmpd5tr1_rv\lib\common\common.py
C:\tmpd5tr1_rv\lib\common\constants.py
C:\tmpd5tr1_rv\lib\common\defines.py
C:\tmpd5tr1_rv\lib\common\errors.py
C:\tmpd5tr1_rv\lib\common\exceptions.py
C:\tmpd5tr1_rv\lib\common\hashing.py
C:\tmpd5tr1_rv\lib\common\parse_pe.py
C:\tmpd5tr1_rv\lib\common\rand.py
C:\tmpd5tr1_rv\lib\common\registry.py
C:\tmpd5tr1_rv\lib\common\results.py
C:\tmpd5tr1_rv\lib\common\zip_utils.py
C:\tmpd5tr1_rv\lib\common\__init__.py
C:\tmpd5tr1_rv\lib\core\compound.py
C:\tmpd5tr1_rv\lib\core\config.py
C:\tmpd5tr1_rv\lib\core\log.py
C:\tmpd5tr1_rv\lib\core\packages.py
C:\tmpd5tr1_rv\lib\core\pipe.py
C:\tmpd5tr1_rv\lib\core\privileges.py
C:\tmpd5tr1_rv\lib\core\startup.py
C:\tmpd5tr1_rv\lib\core\__init__.py
C:\tmpd5tr1_rv\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\amsi.py
C:\tmpd5tr1_rv\modules\auxiliary\amsi_collector.py
C:\tmpd5tr1_rv\modules\auxiliary\autoruns.py
C:\tmpd5tr1_rv\modules\auxiliary\browser.py
C:\tmpd5tr1_rv\data\yara\Syscall.yar
C:\tmpd5tr1_rv\modules\auxiliary\disguise.py
C:\tmpd5tr1_rv\modules\auxiliary\evtx.py
C:\tmpd5tr1_rv\modules\auxiliary\filepickup.py
C:\tmpd5tr1_rv\modules\auxiliary\html_scraper.py
C:\tmpd5tr1_rv\modules\auxiliary\human.py
C:\tmpd5tr1_rv\modules\auxiliary\permissions.py
C:\tmpd5tr1_rv\modules\auxiliary\pre_script.py
C:\tmpd5tr1_rv\modules\auxiliary\procmon.py
C:\tmpd5tr1_rv\modules\auxiliary\recentfiles.py
C:\tmpd5tr1_rv\modules\auxiliary\screenshots.py
C:\tmpd5tr1_rv\modules\auxiliary\sysmon.py
C:\tmpd5tr1_rv\modules\auxiliary\during_script.py
C:\tmpd5tr1_rv\modules\auxiliary\tlsdump.py
C:\tmpd5tr1_rv\modules\auxiliary\__init__.py
C:\tmpd5tr1_rv\modules\packages\autoit.py
C:\tmpd5tr1_rv\modules\packages\archive.py
C:\tmpd5tr1_rv\modules\packages\chm.py
C:\tmpd5tr1_rv\modules\packages\cpl.py
C:\tmpd5tr1_rv\modules\packages\doc_antivm.py
C:\tmpd5tr1_rv\modules\packages\ichitaro.py
C:\tmpd5tr1_rv\modules\packages\ie.py
C:\tmpd5tr1_rv\modules\packages\hta.py
C:\tmpd5tr1_rv\modules\packages\inp.py
C:\tmpd5tr1_rv\modules\packages\js.py
C:\tmpd5tr1_rv\modules\packages\lnk.py
C:\tmpd5tr1_rv\modules\packages\jar.py
C:\tmpd5tr1_rv\modules\packages\msbuild.py
C:\tmpd5tr1_rv\modules\packages\js_antivm.py
C:\tmpd5tr1_rv\modules\packages\msi.py
C:\tmpd5tr1_rv\modules\packages\msg.py
C:\tmpd5tr1_rv\modules\packages\nsis.py
C:\tmpd5tr1_rv\modules\packages\ollydbg.py
C:\tmpd5tr1_rv\modules\packages\ps1.py
C:\tmpd5tr1_rv\modules\packages\pub.py
C:\tmpd5tr1_rv\modules\packages\reg.py
C:\tmpd5tr1_rv\modules\packages\rar.py
C:\tmpd5tr1_rv\modules\packages\regsvr.py
C:\tmpd5tr1_rv\modules\packages\sct.py
C:\tmpd5tr1_rv\modules\packages\service.py
C:\tmpd5tr1_rv\modules\packages\service_dll.py
C:\tmpd5tr1_rv\modules\packages\Unpacker_dll.py
C:\tmpd5tr1_rv\modules\packages\swf.py
C:\tmpd5tr1_rv\modules\packages\Unpacker.py
C:\tmpd5tr1_rv\modules\packages\vbs.py
C:\tmpd5tr1_rv\modules\packages\xls2016.py
C:\tmpd5tr1_rv\modules\packages\xps.py
C:\tmpeoix3ml5\data\yara\AgentTesla.yar
C:\tmpd5tr1_rv\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\data\yara\Al-khaser.yar
C:\tmpeoix3ml5\data\yara\BuerLoader.yar
C:\tmpeoix3ml5\data\yara\DarkGateLoader.yar
C:\tmpeoix3ml5\data\yara\DarkGate.yar
C:\tmpeoix3ml5\data\yara\capemon.yac
C:\tmpeoix3ml5\data\yara\DridexLoader.yar
C:\tmpeoix3ml5\data\yara\Latrodectus.yar
C:\tmpeoix3ml5\data\yara\IcedID.yar
C:\tmpeoix3ml5\data\yara\Lumma.yar
C:\tmpeoix3ml5\data\yara\Guloader.yar
C:\tmpeoix3ml5\data\yara\MysterySnail.yar
C:\tmpeoix3ml5\data\yara\Pafish.yar
C:\tmpeoix3ml5\data\yara\Rhadamanthys.yar
C:\tmpeoix3ml5\data\yara\RdtscpAntiVM.yar
C:\tmpeoix3ml5\data\yara\GetTickCountAntiVM.yar
C:\tmpeoix3ml5\data\yara\Zloader.yar
C:\tmpeoix3ml5\lib\api\screenshot.py
C:\tmpeoix3ml5\lib\api\__init__.py
C:\tmpeoix3ml5\lib\api\process.py
C:\tmpeoix3ml5\lib\common\defines.py
C:\tmpeoix3ml5\lib\common\rand.py
C:\tmpeoix3ml5\lib\core\compound.py
C:\tmpeoix3ml5\lib\common\__init__.py
C:\tmpeoix3ml5\lib\common\registry.py
C:\tmpeoix3ml5\lib\common\zip_utils.py
C:\tmpeoix3ml5\lib\core\log.py
C:\tmpeoix3ml5\lib\core\config.py
C:\tmpeoix3ml5\lib\core\packages.py
C:\tmpeoix3ml5\lib\core\startup.py
C:\tmpeoix3ml5\lib\core\pipe.py
C:\tmpeoix3ml5\lib\core\__init__.py
C:\tmpeoix3ml5\modules\auxiliary\disguise.py
C:\tmpeoix3ml5\modules\auxiliary\filepickup.py
C:\tmpeoix3ml5\modules\auxiliary\screenshots.py
C:\tmpeoix3ml5\modules\auxiliary\procmon.py
C:\tmpeoix3ml5\modules\auxiliary\sysmon.py
C:\tmpeoix3ml5\modules\packages\applet.py
C:\tmpeoix3ml5\modules\packages\autoit.py
C:\tmpeoix3ml5\modules\packages\archive.py
C:\tmpeoix3ml5\modules\packages\chrome.py
C:\tmpeoix3ml5\modules\packages\chm.py
C:\tmpeoix3ml5\modules\packages\edge.py
C:\tmpeoix3ml5\modules\packages\dll.py
C:\tmpeoix3ml5\modules\packages\exe.py
C:\tmpeoix3ml5\modules\packages\eml.py
C:\tmpeoix3ml5\modules\packages\doc.py
C:\tmpeoix3ml5\modules\packages\hta.py
C:\tmpeoix3ml5\modules\packages\hwp.py
C:\tmpeoix3ml5\modules\packages\mht.py
C:\tmpeoix3ml5\modules\packages\inf.py
C:\tmpeoix3ml5\modules\packages\msi.py
C:\tmpeoix3ml5\modules\packages\nsis.py
C:\tmpeoix3ml5\modules\packages\pdf.py
C:\tmpeoix3ml5\modules\packages\ppt.py
C:\tmpeoix3ml5\modules\packages\ppt2016.py
C:\tmpeoix3ml5\modules\packages\ps1.py
C:\tmpeoix3ml5\modules\packages\pub.py
C:\tmpeoix3ml5\modules\packages\pub2016.py
C:\tmpeoix3ml5\modules\packages\reg.py
C:\tmpeoix3ml5\modules\packages\service_dll.py
C:\tmpeoix3ml5\modules\packages\sct.py
C:\tmpeoix3ml5\modules\packages\Shellcode-Unpacker.py
C:\tmpeoix3ml5\modules\packages\service.py
C:\tmpeoix3ml5\modules\packages\swf.py
C:\tmpeoix3ml5\modules\packages\firefox.py
C:\tmpeoix3ml5\modules\packages\Unpacker_regsvr.py
C:\tmpeoix3ml5\modules\packages\vbs.py
C:\tmpeoix3ml5\modules\packages\wsf.py
C:\tmpeoix3ml5\modules\packages\xls.py
C:\tmpeoix3ml5\modules\packages\xls2016.py
C:\tmpeoix3ml5\modules\packages\xps.py
C:\tmpeoix3ml5\modules\packages\xslt.py
C:\tmpeoix3ml5\modules\packages\zip.py
C:\tmpeoix3ml5\modules\packages\zip_compound.py
C:\tmpeoix3ml5\modules\packages\__init__.py
C:\tmph_w19omx\data\yara\AgentTesla.yar
C:\tmph_w19omx\data\yara\Al-khaser.yar
C:\tmph_w19omx\data\yara\AntiCuckoo.yar
C:\tmph_w19omx\data\yara\Blister.yar
C:\tmph_w19omx\data\yara\BuerLoader.yar
C:\tmph_w19omx\data\yara\BumbleBee.yar
C:\tmph_w19omx\data\yara\CargoBayLoader.yar
C:\tmph_w19omx\data\yara\DarkGate.yar
C:\tmph_w19omx\data\yara\DarkGateLoader.yar
C:\tmph_w19omx\data\yara\DoomedLoader.yar
C:\tmph_w19omx\data\yara\DridexLoader.yar
C:\tmph_w19omx\data\yara\EmotetPacker.yar
C:\tmph_w19omx\data\yara\Formbook.yar
C:\tmph_w19omx\data\yara\GetTickCountAntiVM.yar
C:\tmph_w19omx\data\yara\Guloader.yar
C:\tmph_w19omx\data\yara\capemon.yac
C:\tmph_w19omx\data\yara\HeavensSyscall.yar
C:\tmph_w19omx\data\yara\Latrodectus.yar
C:\tmph_w19omx\data\yara\Lumma.yar
C:\tmph_w19omx\data\yara\ModiLoader.yar
C:\tmph_w19omx\data\yara\MysterySnail.yar
C:\tmph_w19omx\data\yara\IcedID.yar
C:\tmph_w19omx\data\yara\Pafish.yar
C:\tmph_w19omx\data\yara\QakBot.yar
C:\tmph_w19omx\data\yara\RdtscpAntiVM.yar
C:\tmph_w19omx\data\yara\RisePro.yar
C:\tmph_w19omx\data\yara\SmokeLoader.yar
C:\tmph_w19omx\data\yara\Socks5Systemz.yar
C:\tmph_w19omx\data\yara\Stealc.yar
C:\tmpeoix3ml5\modules\packages\Unpacker.py
C:\tmpeoix3ml5\modules\packages\Unpacker_dll.py
C:\tmpeoix3ml5\modules\packages\vbejse.py
C:\tmph_w19omx\data\yara\UrsnifV3.yar
C:\tmph_w19omx\data\yara\VBCrypter.yar
C:\tmph_w19omx\data\yara\XWorm.yar
C:\tmph_w19omx\data\yara\Zloader.yar
C:\tmph_w19omx\lib\api\utils.py
C:\tmph_w19omx\lib\api\screenshot.py
C:\tmph_w19omx\data\yara\UPX.yar
C:\tmpeoix3ml5\modules\packages\Unpacker_js.py
C:\tmph_w19omx\lib\common\abstracts.py
C:\tmph_w19omx\lib\common\common.py
C:\tmph_w19omx\data\yara\Syscall.yar
C:\tmph_w19omx\lib\common\constants.py
C:\tmph_w19omx\lib\common\exceptions.py
C:\tmph_w19omx\lib\common\hashing.py
C:\tmph_w19omx\lib\common\defines.py
C:\tmph_w19omx\lib\common\zip_utils.py
C:\tmph_w19omx\lib\common\rand.py
C:\tmph_w19omx\lib\core\log.py
C:\tmph_w19omx\lib\core\privileges.py
C:\tmph_w19omx\lib\core\packages.py
C:\tmph_w19omx\lib\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\modules\auxiliary\amsi_collector.py
C:\tmph_w19omx\lib\core\pipe.py
C:\tmph_w19omx\modules\auxiliary\autoruns.py
C:\tmph_w19omx\modules\auxiliary\curtain.py
C:\tmph_w19omx\modules\auxiliary\browser.py
C:\tmph_w19omx\modules\auxiliary\digisig.py
C:\tmph_w19omx\modules\auxiliary\recentfiles.py
C:\tmph_w19omx\modules\auxiliary\evtx.py
C:\tmph_w19omx\modules\auxiliary\screenshots.py
C:\tmph_w19omx\modules\auxiliary\__init__.py
C:\tmph_w19omx\modules\packages\access.py
C:\tmph_w19omx\modules\packages\archive.py
C:\tmph_w19omx\modules\packages\autoit.py
C:\tmph_w19omx\modules\packages\chm.py
C:\tmph_w19omx\modules\packages\chromium.py
C:\tmph_w19omx\modules\packages\cpl.py
C:\tmph_w19omx\modules\packages\doc.py
C:\tmph_w19omx\modules\packages\doc2016.py
C:\tmph_w19omx\modules\packages\doc_antivm.py
C:\tmph_w19omx\modules\packages\dll.py
C:\tmph_w19omx\modules\packages\firefox.py
C:\tmph_w19omx\modules\packages\generic.py
C:\tmph_w19omx\modules\packages\hta.py
C:\tmph_w19omx\modules\packages\ie.py
C:\tmph_w19omx\modules\packages\inf.py
C:\tmph_w19omx\modules\packages\inp.py
C:\tmph_w19omx\modules\packages\jar.py
C:\tmph_w19omx\modules\packages\js.py
C:\tmph_w19omx\modules\packages\lnk.py
C:\tmph_w19omx\modules\packages\mht.py
C:\tmph_w19omx\modules\packages\msg.py
C:\tmph_w19omx\modules\packages\msbuild.py
C:\tmph_w19omx\modules\packages\pub2016.py
C:\tmph_w19omx\modules\packages\python.py
C:\tmph_w19omx\modules\packages\rar.py
C:\tmph_w19omx\modules\packages\reg.py
C:\tmph_w19omx\modules\packages\Shellcode-Unpacker.py
C:\tmph_w19omx\modules\packages\service_dll.py
C:\tmph_w19omx\modules\packages\service.py
C:\tmph_w19omx\modules\packages\Shellcode.py
C:\tmph_w19omx\modules\packages\Shellcode_x64.py
C:\tmph_w19omx\modules\packages\Unpacker.py
C:\tmph_w19omx\modules\packages\Unpacker_dll.py
C:\tmph_w19omx\modules\packages\Unpacker_js.py
C:\tmph_w19omx\modules\packages\Unpacker_ps1.py
C:\tmph_w19omx\modules\packages\Unpacker_zip.py
C:\tmph_w19omx\modules\packages\vawtrak.py
C:\tmph_w19omx\modules\packages\vbs.py
C:\tmph_w19omx\modules\packages\xls.py
C:\tmph_w19omx\modules\packages\xslt.py
C:\tmph_w19omx\modules\packages\zip.py
C:\tmph_w19omx\modules\packages\__init__.py
C:\tmph_w19omx\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpsv59hb03\data\yara\AgentTesla.yar
C:\tmpsv59hb03\data\yara\AntiCuckoo.yar
C:\tmpsv59hb03\data\yara\BuerLoader.yar
C:\tmpsv59hb03\data\yara\Blister.yar
C:\tmpsv59hb03\data\yara\BumbleBee.yar
C:\tmpsv59hb03\data\yara\CargoBayLoader.yar
C:\tmpsv59hb03\data\yara\DarkGateLoader.yar
C:\tmpsv59hb03\data\yara\DarkGate.yar
C:\tmpsv59hb03\data\yara\DoomedLoader.yar
C:\tmpsv59hb03\data\yara\Formbook.yar
C:\tmpsv59hb03\data\yara\Guloader.yar
C:\tmpsv59hb03\data\yara\HeavensSyscall.yar
C:\tmpsv59hb03\data\yara\IcedID.yar
C:\tmpsv59hb03\data\yara\Latrodectus.yar
C:\tmpsv59hb03\data\yara\MysterySnail.yar
C:\tmpsv59hb03\data\yara\NSIS.yar
C:\tmpsv59hb03\data\yara\Pikabot.yar
C:\tmpsv59hb03\data\yara\QakBot.yar
C:\tmpsv59hb03\data\yara\RisePro.yar
C:\tmpsv59hb03\data\yara\SingleStepAntiHook.yar
C:\tmpsv59hb03\data\yara\Socks5Systemz.yar
C:\tmpsv59hb03\data\yara\Stealc.yar
C:\tmpsv59hb03\data\yara\UPX.yar
C:\tmpsv59hb03\data\yara\UrsnifV3.yar
C:\tmpsv59hb03\data\yara\XWorm.yar
C:\tmpsv59hb03\data\yara\Zloader.yar
C:\tmpsv59hb03\lib\api\screenshot.py
C:\tmpsv59hb03\lib\api\utils.py
C:\tmpsv59hb03\lib\api\__init__.py
C:\tmpsv59hb03\lib\api\process.py
C:\tmpsv59hb03\lib\common\common.py
C:\tmpsv59hb03\lib\common\abstracts.py
C:\tmpsv59hb03\lib\common\constants.py
C:\tmpsv59hb03\lib\common\exceptions.py
C:\tmpsv59hb03\lib\common\hashing.py
C:\tmpsv59hb03\lib\common\errors.py
C:\tmpsv59hb03\lib\common\rand.py
C:\tmpsv59hb03\lib\common\registry.py
C:\tmpsv59hb03\lib\common\results.py
C:\tmpsv59hb03\lib\common\__init__.py
C:\tmpsv59hb03\lib\core\compound.py
C:\tmpsv59hb03\lib\common\zip_utils.py
C:\tmpsv59hb03\lib\core\config.py
C:\tmpsv59hb03\lib\core\log.py
C:\tmpsv59hb03\lib\core\packages.py
C:\tmpsv59hb03\lib\core\privileges.py
C:\tmpsv59hb03\lib\core\pipe.py
C:\tmpsv59hb03\lib\core\__init__.py
C:\tmpsv59hb03\lib\core\startup.py
C:\tmpsv59hb03\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpsv59hb03\modules\auxiliary\amsi_collector.py
C:\tmpsv59hb03\modules\auxiliary\autoruns.py
C:\tmpsv59hb03\modules\auxiliary\browser.py
C:\tmpsv59hb03\modules\auxiliary\curtain.py
C:\tmpsv59hb03\modules\auxiliary\digisig.py
C:\tmpsv59hb03\modules\auxiliary\amsi.py
C:\tmpsv59hb03\modules\auxiliary\disguise.py
C:\tmpsv59hb03\modules\auxiliary\during_script.py
C:\tmpsv59hb03\modules\auxiliary\filepickup.py
C:\tmpsv59hb03\modules\auxiliary\evtx.py
C:\tmpsv59hb03\modules\auxiliary\html_scraper.py
C:\tmpsv59hb03\modules\auxiliary\permissions.py
C:\tmpsv59hb03\modules\auxiliary\human.py
C:\tmpsv59hb03\modules\auxiliary\pre_script.py
C:\tmpsv59hb03\modules\auxiliary\procmon.py
C:\tmpsv59hb03\modules\auxiliary\recentfiles.py
C:\tmpsv59hb03\modules\auxiliary\screenshots.py
C:\tmpsv59hb03\modules\auxiliary\sysmon.py
C:\tmpsv59hb03\modules\auxiliary\tlsdump.py
C:\tmpsv59hb03\modules\auxiliary\__init__.py
C:\tmpsv59hb03\modules\auxiliary\usage.py
C:\tmpsv59hb03\modules\packages\access.py
C:\tmpsv59hb03\modules\packages\applet.py
C:\tmpsv59hb03\modules\packages\autoit.py
C:\tmpsv59hb03\modules\packages\chm.py
C:\tmpsv59hb03\modules\packages\chrome.py
C:\tmpsv59hb03\modules\packages\chromium.py
C:\tmpsv59hb03\modules\packages\cpl.py
C:\tmpsv59hb03\modules\packages\doc.py
C:\tmpsv59hb03\modules\packages\doc2016.py
C:\tmpsv59hb03\modules\packages\edge.py
C:\tmpsv59hb03\modules\packages\exe.py
C:\tmpsv59hb03\modules\packages\firefox.py
C:\tmpsv59hb03\modules\packages\generic.py
C:\tmpsv59hb03\modules\packages\hta.py
C:\tmpsv59hb03\modules\packages\hwp.py
C:\tmpsv59hb03\modules\packages\ichitaro.py
C:\tmpsv59hb03\modules\packages\ie.py
C:\tmpsv59hb03\modules\packages\inf.py
C:\tmpsv59hb03\modules\packages\jar.py
C:\tmpsv59hb03\modules\packages\js_antivm.py
C:\tmpsv59hb03\modules\packages\lnk.py
C:\tmpsv59hb03\modules\packages\mht.py
C:\tmpsv59hb03\modules\packages\msbuild.py
C:\tmpsv59hb03\modules\packages\msg.py
C:\tmpsv59hb03\modules\packages\msi.py
C:\tmpsv59hb03\modules\packages\msix.py
C:\tmpsv59hb03\modules\packages\nsis.py
C:\tmpsv59hb03\modules\packages\one.py
C:\tmpsv59hb03\modules\packages\pdf.py
C:\tmpsv59hb03\modules\packages\ppt.py
C:\tmpsv59hb03\modules\packages\ppt2016.py
C:\tmpsv59hb03\modules\packages\ps1.py
C:\tmpsv59hb03\modules\packages\pub.py
C:\tmpsv59hb03\modules\packages\pub2016.py
C:\tmpsv59hb03\modules\packages\python.py
C:\tmpsv59hb03\modules\packages\rar.py
C:\tmpsv59hb03\modules\packages\reg.py
C:\tmpsv59hb03\modules\packages\regsvr.py
C:\tmpsv59hb03\modules\packages\sct.py
C:\tmph_w19omx\modules\packages\eml.py
C:\tmph_w19omx\modules\packages\msix.py
C:\tmpsv59hb03\modules\packages\service.py
C:\tmpsv59hb03\modules\packages\service_dll.py
C:\tmpsv59hb03\modules\packages\Shellcode.py
C:\tmpsv59hb03\modules\packages\Shellcode_x64.py
C:\tmpsv59hb03\modules\packages\swf.py
C:\tmpsv59hb03\modules\packages\Unpacker_dll.py
C:\tmpsv59hb03\modules\packages\Unpacker_ps1.py
C:\tmpsv59hb03\modules\packages\Unpacker_js.py
C:\tmpsv59hb03\modules\packages\vawtrak.py
C:\tmpsv59hb03\modules\packages\Unpacker_zip.py
C:\tmpsv59hb03\modules\packages\wsf.py
C:\tmpsv59hb03\modules\packages\xls.py
C:\tmpsv59hb03\modules\packages\xslt.py
C:\tmpsv59hb03\modules\packages\__init__.py
C:\tmpsv59hb03\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpugscyilj\data\yara\AgentTesla.yar
C:\tmpsv59hb03\modules\packages\zip_compound.py
C:\tmpsv59hb03\modules\packages\zip.py
C:\tmpugscyilj\data\yara\AntiCuckoo.yar
C:\tmpugscyilj\data\yara\Blister.yar
C:\tmpugscyilj\data\yara\BumbleBee.yar
C:\tmpugscyilj\data\yara\BuerLoader.yar
C:\tmpugscyilj\data\yara\CargoBayLoader.yar
C:\tmpugscyilj\data\yara\DarkGate.yar
C:\tmpugscyilj\data\yara\DarkGateLoader.yar
C:\tmph_w19omx\modules\packages\xps.py
C:\tmpsv59hb03\lib\common\parse_pe.py
C:\tmpugscyilj\data\yara\DoomedLoader.yar
C:\tmpugscyilj\data\yara\capemon.yac
C:\tmpugscyilj\data\yara\Formbook.yar
C:\tmpugscyilj\data\yara\GetTickCountAntiVM.yar
C:\tmpugscyilj\data\yara\Guloader.yar
C:\tmpugscyilj\data\yara\HeavensSyscall.yar
C:\tmpugscyilj\data\yara\IcedID.yar
C:\tmpugscyilj\data\yara\Lumma.yar
C:\tmpugscyilj\data\yara\MysterySnail.yar
C:\tmpugscyilj\data\yara\NSIS.yar
C:\tmpugscyilj\data\yara\Pafish.yar
C:\tmpugscyilj\data\yara\Pikabot.yar
C:\tmpugscyilj\data\yara\RdtscpAntiVM.yar
C:\tmpugscyilj\data\yara\Rhadamanthys.yar
C:\tmpugscyilj\data\yara\QakBot.yar
C:\tmpugscyilj\data\yara\RisePro.yar
C:\tmpugscyilj\data\yara\Stealc.yar
C:\tmpugscyilj\data\yara\Socks5Systemz.yar
C:\tmpugscyilj\data\yara\Syscall.yar
C:\tmpugscyilj\data\yara\SingleStepAntiHook.yar
C:\tmpugscyilj\data\yara\UrsnifV3.yar
C:\tmpugscyilj\data\yara\VBCrypter.yar
C:\tmpugscyilj\data\yara\SmokeLoader.yar
C:\tmpugscyilj\data\yara\Zloader.yar
C:\tmpugscyilj\data\yara\XWorm.yar
C:\tmpugscyilj\lib\api\screenshot.py
C:\tmpugscyilj\lib\api\__init__.py
C:\tmpugscyilj\lib\api\utils.py
C:\tmpugscyilj\lib\api\process.py
C:\tmpugscyilj\lib\common\constants.py
C:\tmpugscyilj\lib\common\defines.py
C:\tmpugscyilj\lib\common\exceptions.py
C:\tmpugscyilj\lib\common\hashing.py
C:\tmpugscyilj\lib\common\parse_pe.py
C:\tmpugscyilj\lib\common\errors.py
C:\tmpugscyilj\lib\common\rand.py
C:\tmpugscyilj\lib\common\registry.py
C:\tmpugscyilj\lib\common\results.py
C:\tmpugscyilj\lib\core\compound.py
C:\tmpugscyilj\lib\common\__init__.py
C:\tmpugscyilj\lib\common\zip_utils.py
C:\tmpugscyilj\lib\core\config.py
C:\tmpugscyilj\lib\core\log.py
C:\tmpugscyilj\lib\core\privileges.py
C:\tmpugscyilj\lib\core\pipe.py
C:\tmpugscyilj\lib\core\packages.py
C:\tmpugscyilj\lib\core\__init__.py
C:\tmpugscyilj\lib\core\startup.py
C:\tmpugscyilj\modules\auxiliary\amsi_collector.py
C:\tmpugscyilj\modules\auxiliary\autoruns.py
C:\tmpugscyilj\modules\auxiliary\browser.py
C:\tmpugscyilj\modules\auxiliary\curtain.py
C:\tmpugscyilj\modules\auxiliary\digisig.py
C:\tmpugscyilj\modules\auxiliary\during_script.py
C:\tmpugscyilj\modules\auxiliary\disguise.py
C:\tmpugscyilj\modules\auxiliary\amsi.py
C:\tmpugscyilj\modules\auxiliary\evtx.py
C:\tmpsv59hb03\modules\packages\Shellcode-Unpacker.py
C:\tmpugscyilj\data\yara\EmotetPacker.yar
C:\tmpugscyilj\modules\auxiliary\human.py
C:\tmpugscyilj\modules\auxiliary\permissions.py
C:\tmpugscyilj\modules\auxiliary\recentfiles.py
C:\tmpugscyilj\modules\auxiliary\screenshots.py
C:\tmpugscyilj\modules\auxiliary\sysmon.py
C:\tmpugscyilj\modules\auxiliary\tlsdump.py
C:\tmpugscyilj\modules\auxiliary\procmon.py
C:\tmpugscyilj\modules\packages\access.py
C:\tmpugscyilj\modules\auxiliary\__init__.py
C:\tmpugscyilj\modules\auxiliary\usage.py
C:\tmpugscyilj\modules\packages\applet.py
C:\tmpugscyilj\modules\packages\pdf.py
C:\tmpugscyilj\modules\packages\one.py
C:\tmpugscyilj\modules\packages\ppt.py
C:\tmpugscyilj\modules\packages\ps1.py
C:\tmpugscyilj\modules\packages\rar.py
C:\tmpugscyilj\modules\packages\reg.py
C:\tmpugscyilj\modules\packages\autoit.py
C:\tmpugscyilj\modules\packages\service.py
C:\tmpugscyilj\modules\packages\service_dll.py
C:\tmpugscyilj\modules\packages\Shellcode.py
C:\tmpugscyilj\modules\packages\swf.py
C:\tmpugscyilj\modules\packages\Unpacker_dll.py
C:\tmpugscyilj\modules\packages\Unpacker_js.py
C:\tmpugscyilj\modules\packages\Unpacker_ps1.py
C:\tmpugscyilj\modules\packages\Unpacker_regsvr.py
C:\tmpugscyilj\modules\packages\Unpacker_zip.py
C:\tmpugscyilj\modules\packages\vbejse.py
C:\tmpugscyilj\modules\packages\vbs.py
C:\tmpugscyilj\modules\packages\wsf.py
C:\tmpugscyilj\modules\packages\Unpacker.py
C:\tmpugscyilj\modules\packages\xls2016.py
C:\tmpugscyilj\modules\packages\xls.py
C:\tmpugscyilj\modules\packages\xslt.py
C:\tmpugscyilj\modules\packages\zip_compound.py
C:\tmpugscyilj\modules\packages\__init__.py
C:\tmpugscyilj\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpxa6n6jlb\data\yara\Al-khaser.yar
C:\tmpxa6n6jlb\data\yara\Blister.yar
C:\tmpxa6n6jlb\data\yara\BuerLoader.yar
C:\tmpxa6n6jlb\data\yara\AgentTesla.yar
C:\tmpxa6n6jlb\data\yara\AntiCuckoo.yar
C:\tmpxa6n6jlb\data\yara\BumbleBee.yar
C:\tmpxa6n6jlb\data\yara\CargoBayLoader.yar
C:\tmpxa6n6jlb\data\yara\DarkGate.yar
C:\tmpxa6n6jlb\data\yara\DarkGateLoader.yar
C:\tmpxa6n6jlb\data\yara\DoomedLoader.yar
C:\tmpxa6n6jlb\data\yara\DridexLoader.yar
C:\tmpxa6n6jlb\data\yara\EmotetPacker.yar
C:\tmpxa6n6jlb\data\yara\Formbook.yar
C:\tmpxa6n6jlb\data\yara\GetTickCountAntiVM.yar
C:\tmpxa6n6jlb\data\yara\Guloader.yar
C:\tmpxa6n6jlb\data\yara\HeavensSyscall.yar
C:\tmpxa6n6jlb\data\yara\IcedID.yar
C:\tmpxa6n6jlb\data\yara\Latrodectus.yar
C:\tmpugscyilj\modules\packages\vawtrak.py
C:\tmpxa6n6jlb\data\yara\Lumma.yar
C:\tmpugscyilj\modules\packages\zip.py
C:\tmpugscyilj\modules\packages\xps.py
C:\tmpxa6n6jlb\data\yara\QakBot.yar
C:\tmpxa6n6jlb\data\yara\Rhadamanthys.yar
C:\tmpxa6n6jlb\data\yara\VBCrypter.yar
C:\tmpxa6n6jlb\data\yara\RisePro.yar
C:\tmpxa6n6jlb\data\yara\XWorm.yar
C:\tmpxa6n6jlb\data\yara\UrsnifV3.yar
C:\tmpxa6n6jlb\lib\api\process.py
C:\tmpxa6n6jlb\lib\api\screenshot.py
C:\tmpxa6n6jlb\lib\api\utils.py
C:\tmpxa6n6jlb\lib\api\__init__.py
C:\tmpxa6n6jlb\lib\common\common.py
C:\tmpxa6n6jlb\lib\common\constants.py
C:\tmpxa6n6jlb\lib\common\abstracts.py
C:\tmpxa6n6jlb\lib\common\defines.py
C:\tmpxa6n6jlb\lib\common\exceptions.py
C:\tmpxa6n6jlb\lib\common\parse_pe.py
C:\tmpxa6n6jlb\lib\common\rand.py
C:\tmpxa6n6jlb\lib\common\errors.py
C:\Archivos de programa\RUXIM\Assets\MainGraphic.gif
C:\tmpxa6n6jlb\lib\common\registry.py
C:\tmpxa6n6jlb\lib\common\zip_utils.py
C:\tmpxa6n6jlb\lib\common\__init__.py
C:\tmpxa6n6jlb\lib\core\compound.py
C:\tmpxa6n6jlb\lib\core\config.py
C:\tmpxa6n6jlb\lib\core\log.py
C:\tmpxa6n6jlb\lib\core\packages.py
C:\tmpxa6n6jlb\lib\core\pipe.py
C:\tmpxa6n6jlb\lib\core\privileges.py
C:\tmpxa6n6jlb\lib\core\__init__.py
C:\tmpxa6n6jlb\lib\core\startup.py
C:\tmpxa6n6jlb\modules\auxiliary\amsi_collector.py
C:\tmpxa6n6jlb\modules\auxiliary\browser.py
C:\tmpxa6n6jlb\modules\auxiliary\curtain.py
C:\tmpxa6n6jlb\modules\auxiliary\autoruns.py
C:\tmpxa6n6jlb\modules\auxiliary\during_script.py
C:\tmpxa6n6jlb\modules\auxiliary\filepickup.py
C:\tmpxa6n6jlb\modules\auxiliary\digisig.py
C:\tmpxa6n6jlb\modules\auxiliary\html_scraper.py
C:\tmpxa6n6jlb\modules\auxiliary\permissions.py
C:\tmpxa6n6jlb\modules\auxiliary\recentfiles.py
C:\tmpxa6n6jlb\modules\packages\access.py
C:\tmpxa6n6jlb\modules\auxiliary\screenshots.py
C:\tmpxa6n6jlb\modules\auxiliary\__init__.py
C:\tmpxa6n6jlb\modules\auxiliary\procmon.py
C:\tmpxa6n6jlb\modules\packages\autoit.py
C:\tmpxa6n6jlb\modules\packages\archive.py
C:\tmpxa6n6jlb\modules\packages\cpl.py
C:\tmpxa6n6jlb\modules\packages\dll.py
C:\tmpxa6n6jlb\modules\packages\doc2016.py
C:\tmpxa6n6jlb\modules\packages\edge.py
C:\tmpxa6n6jlb\modules\packages\hwp.py
C:\tmpxa6n6jlb\modules\packages\generic.py
C:\tmpxa6n6jlb\modules\packages\js.py
C:\tmpxa6n6jlb\modules\packages\lnk.py
C:\tmpxa6n6jlb\modules\packages\msbuild.py
C:\tmpxa6n6jlb\modules\packages\msix.py
C:\tmpxa6n6jlb\modules\packages\nsis.py
C:\tmpxa6n6jlb\modules\packages\msg.py
C:\tmpxa6n6jlb\modules\packages\pdf.py
C:\tmpxa6n6jlb\modules\packages\ollydbg.py
C:\tmpxa6n6jlb\modules\packages\msi.py
C:\tmpxa6n6jlb\modules\packages\ps1.py
C:\tmpxa6n6jlb\modules\packages\pub2016.py
C:\tmpxa6n6jlb\modules\packages\rar.py
C:\tmpxa6n6jlb\modules\packages\reg.py
C:\tmpxa6n6jlb\modules\packages\regsvr.py
C:\tmpxa6n6jlb\modules\packages\sct.py
C:\tmpxa6n6jlb\modules\packages\service.py
C:\tmpxa6n6jlb\modules\packages\service_dll.py
C:\tmpxa6n6jlb\modules\packages\python.py
C:\tmpxa6n6jlb\modules\packages\one.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_dll.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_js.py
C:\tmpxa6n6jlb\modules\packages\swf.py
C:\tmpxa6n6jlb\modules\packages\Unpacker_regsvr.py
C:\tmpxa6n6jlb\modules\packages\vbs.py
C:\tmpxa6n6jlb\modules\packages\zip_compound.py
C:\tmpxa6n6jlb\modules\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\data\yara\AgentTesla.yar
C:\tmpyhyv52bd\data\yara\Al-khaser.yar
C:\tmpyhyv52bd\data\yara\AntiCuckoo.yar
C:\tmpyhyv52bd\data\yara\Blister.yar
C:\tmpxa6n6jlb\modules\packages\__init__.py
C:\tmpyhyv52bd\data\yara\BuerLoader.yar
C:\tmpxa6n6jlb\modules\packages\zip.py
C:\tmpyhyv52bd\data\yara\BumbleBee.yar
C:\tmpyhyv52bd\data\yara\CargoBayLoader.yar
C:\tmpyhyv52bd\data\yara\DarkGate.yar
C:\tmpyhyv52bd\data\yara\DarkGateLoader.yar
C:\tmpyhyv52bd\data\yara\DoomedLoader.yar
C:\tmpyhyv52bd\data\yara\DridexLoader.yar
C:\tmpyhyv52bd\data\yara\EmotetPacker.yar
C:\tmpyhyv52bd\data\yara\HeavensSyscall.yar
C:\tmpxa6n6jlb\modules\packages\Unpacker_ps1.py
C:\tmpxa6n6jlb\modules\packages\xslt.py
C:\tmpyhyv52bd\data\yara\ModiLoader.yar
C:\tmpyhyv52bd\data\yara\MysterySnail.yar
C:\tmpyhyv52bd\data\yara\Pafish.yar
C:\tmpyhyv52bd\data\yara\NSIS.yar
C:\tmpyhyv52bd\data\yara\RdtscpAntiVM.yar
C:\tmpyhyv52bd\data\yara\Rhadamanthys.yar
C:\tmpyhyv52bd\data\yara\QakBot.yar
C:\tmpyhyv52bd\data\yara\UPX.yar
C:\tmpyhyv52bd\data\yara\UrsnifV3.yar
C:\tmpyhyv52bd\lib\api\__init__.py
C:\tmpyhyv52bd\lib\common\common.py
C:\tmpyhyv52bd\lib\api\process.py
C:\tmpyhyv52bd\lib\common\exceptions.py
C:\tmpyhyv52bd\lib\common\rand.py
C:\tmpyhyv52bd\lib\common\hashing.py
C:\tmpyhyv52bd\lib\common\results.py
C:\tmpyhyv52bd\lib\common\parse_pe.py
C:\tmpyhyv52bd\lib\common\__init__.py
C:\tmpyhyv52bd\lib\common\registry.py
C:\tmpyhyv52bd\lib\common\zip_utils.py
C:\tmpyhyv52bd\lib\core\config.py
C:\tmpyhyv52bd\lib\core\compound.py
C:\tmpyhyv52bd\lib\common\errors.py
C:\tmpyhyv52bd\lib\core\log.py
C:\tmpyhyv52bd\lib\core\privileges.py
C:\tmpyhyv52bd\lib\core\packages.py
C:\tmpyhyv52bd\lib\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__init__.py
C:\tmpyhyv52bd\modules\auxiliary\amsi_collector.py
C:\tmpyhyv52bd\lib\core\startup.py
C:\tmpyhyv52bd\modules\auxiliary\browser.py
C:\tmpyhyv52bd\modules\auxiliary\autoruns.py
C:\tmpyhyv52bd\modules\auxiliary\curtain.py
C:\tmpyhyv52bd\modules\auxiliary\during_script.py
C:\tmpyhyv52bd\modules\auxiliary\digisig.py
C:\tmpyhyv52bd\modules\auxiliary\filepickup.py
C:\tmpyhyv52bd\modules\auxiliary\disguise.py
C:\tmpyhyv52bd\modules\auxiliary\html_scraper.py
C:\tmpyhyv52bd\modules\auxiliary\evtx.py
C:\tmpyhyv52bd\modules\auxiliary\pre_script.py
C:\tmpyhyv52bd\modules\auxiliary\recentfiles.py
C:\tmpyhyv52bd\modules\auxiliary\tlsdump.py
C:\tmpyhyv52bd\modules\auxiliary\sysmon.py
C:\tmpyhyv52bd\modules\packages\autoit.py
C:\tmpyhyv52bd\modules\auxiliary\usage.py
C:\tmpyhyv52bd\modules\packages\chrome.py
C:\tmpyhyv52bd\modules\packages\chm.py
C:\tmpyhyv52bd\modules\packages\doc_antivm.py
C:\tmpyhyv52bd\modules\packages\doc.py
C:\tmpyhyv52bd\modules\packages\edge.py
C:\tmpyhyv52bd\modules\packages\dll.py
C:\tmpyhyv52bd\modules\packages\firefox.py
C:\tmpyhyv52bd\modules\packages\doc2016.py
C:\tmpyhyv52bd\modules\packages\eml.py
C:\tmpyhyv52bd\modules\packages\hta.py
C:\tmpyhyv52bd\modules\packages\hwp.py
C:\tmpyhyv52bd\modules\packages\ichitaro.py
C:\tmpyhyv52bd\modules\packages\inp.py
C:\tmpyhyv52bd\modules\packages\js_antivm.py
C:\tmpyhyv52bd\modules\packages\lnk.py
C:\tmpyhyv52bd\modules\packages\mht.py
C:\tmpyhyv52bd\modules\packages\msbuild.py
C:\tmpyhyv52bd\modules\packages\msg.py
C:\tmpyhyv52bd\modules\packages\generic.py
C:\tmpyhyv52bd\modules\packages\inf.py
C:\tmpyhyv52bd\modules\packages\nsis.py
C:\tmpyhyv52bd\modules\packages\ps1.py
C:\tmpyhyv52bd\modules\packages\pub.py
C:\tmpyhyv52bd\modules\packages\pub2016.py
C:\tmpyhyv52bd\modules\packages\python.py
C:\tmpyhyv52bd\modules\packages\rar.py
C:\tmpyhyv52bd\modules\packages\reg.py
C:\tmpyhyv52bd\modules\packages\sct.py
C:\tmpyhyv52bd\modules\packages\service.py
C:\tmpyhyv52bd\modules\packages\regsvr.py
C:\tmpyhyv52bd\modules\packages\Shellcode_x64.py
C:\tmpyhyv52bd\data\yara\Lumma.yar
C:\tmpyhyv52bd\modules\packages\Unpacker_zip.py
C:\tmpyhyv52bd\modules\packages\vawtrak.py
C:\tmpyhyv52bd\modules\packages\wsf.py
C:\tmpyhyv52bd\modules\packages\xslt.py
C:\tmpyhyv52bd\modules\packages\__init__.py
C:\tmpyhyv52bd\modules\packages\zip_compound.py
C:\tmpyhyv52bd\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\data\yara\AgentTesla.yar
C:\tmpyhyv52bd\modules\packages\zip.py
C:\tmp_4c73x2e\data\yara\Al-khaser.yar
C:\tmpyhyv52bd\modules\packages\Unpacker_dll.py
C:\tmpyhyv52bd\data\yara\capemon.yac
C:\tmp_4c73x2e\data\yara\AntiCuckoo.yar
C:\tmp_4c73x2e\data\yara\Blister.yar
C:\tmp_4c73x2e\data\yara\BuerLoader.yar
C:\tmp_4c73x2e\data\yara\BumbleBee.yar
C:\tmp_4c73x2e\data\yara\CargoBayLoader.yar
C:\tmp_4c73x2e\data\yara\EmotetPacker.yar
C:\tmp_4c73x2e\data\yara\DridexLoader.yar
C:\tmp_4c73x2e\data\yara\IcedID.yar
C:\tmp_4c73x2e\data\yara\DoomedLoader.yar
C:\tmp_4c73x2e\data\yara\Lumma.yar
C:\tmp_4c73x2e\data\yara\MysterySnail.yar
C:\tmp_4c73x2e\data\yara\NSIS.yar
C:\tmp_4c73x2e\data\yara\DarkGate.yar
C:\tmp_4c73x2e\data\yara\Latrodectus.yar
C:\tmp_4c73x2e\data\yara\RdtscpAntiVM.yar
C:\tmp_4c73x2e\data\yara\Rhadamanthys.yar
C:\tmp_4c73x2e\data\yara\Pafish.yar
C:\tmp_4c73x2e\data\yara\ModiLoader.yar
C:\tmp_4c73x2e\data\yara\RisePro.yar
C:\tmp_4c73x2e\data\yara\QakBot.yar
C:\tmp_4c73x2e\data\yara\SingleStepAntiHook.yar
C:\tmp_4c73x2e\data\yara\SmokeLoader.yar
C:\tmp_4c73x2e\data\yara\Socks5Systemz.yar
C:\tmp_4c73x2e\data\yara\Stealc.yar
C:\tmp_4c73x2e\data\yara\Syscall.yar
C:\tmp_4c73x2e\data\yara\UrsnifV3.yar
C:\tmp_4c73x2e\data\yara\Zloader.yar
C:\tmp_4c73x2e\lib\api\process.py
C:\tmp_4c73x2e\data\yara\HeavensSyscall.yar
C:\tmp_4c73x2e\lib\common\common.py
C:\tmp_4c73x2e\lib\common\constants.py
C:\tmp_4c73x2e\lib\common\abstracts.py
C:\tmp_4c73x2e\lib\common\exceptions.py
C:\tmp_4c73x2e\lib\common\defines.py
C:\tmp_4c73x2e\lib\common\hashing.py
C:\tmp_4c73x2e\lib\common\parse_pe.py
C:\tmp_4c73x2e\lib\common\rand.py
C:\tmp_4c73x2e\lib\common\registry.py
C:\tmp_4c73x2e\lib\common\results.py
C:\tmp_4c73x2e\lib\common\errors.py
C:\tmp_4c73x2e\data\yara\XWorm.yar
C:\tmp_4c73x2e\lib\common\__init__.py
C:\tmp_4c73x2e\lib\common\zip_utils.py
C:\tmp_4c73x2e\lib\core\compound.py
C:\tmp_4c73x2e\lib\core\config.py
C:\tmp_4c73x2e\lib\core\log.py
C:\tmp_4c73x2e\lib\core\packages.py
C:\tmp_4c73x2e\lib\core\pipe.py
C:\tmp_4c73x2e\lib\core\privileges.py
C:\tmp_4c73x2e\lib\core\startup.py
C:\tmp_4c73x2e\lib\core\__init__.py
C:\tmp_4c73x2e\lib\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\amsi_collector.py
C:\tmp_4c73x2e\modules\auxiliary\autoruns.py
C:\tmp_4c73x2e\data\yara\Formbook.yar
C:\tmp_4c73x2e\modules\auxiliary\amsi.py
C:\tmp_4c73x2e\modules\auxiliary\curtain.py
C:\tmp_4c73x2e\modules\auxiliary\during_script.py
C:\tmp_4c73x2e\modules\auxiliary\digisig.py
C:\tmp_4c73x2e\modules\auxiliary\filepickup.py
C:\tmp_4c73x2e\modules\auxiliary\disguise.py
C:\tmp_4c73x2e\modules\auxiliary\html_scraper.py
C:\tmp_4c73x2e\modules\auxiliary\permissions.py
C:\tmp_4c73x2e\modules\auxiliary\human.py
C:\tmp_4c73x2e\modules\auxiliary\procmon.py
C:\tmp_4c73x2e\modules\auxiliary\recentfiles.py
C:\tmp_4c73x2e\modules\auxiliary\screenshots.py
C:\tmp_4c73x2e\modules\auxiliary\tlsdump.py
C:\tmp_4c73x2e\modules\auxiliary\__init__.py
C:\tmp_4c73x2e\modules\packages\access.py
C:\tmp_4c73x2e\modules\packages\applet.py
C:\tmp_4c73x2e\modules\auxiliary\usage.py
C:\tmp_4c73x2e\modules\packages\autoit.py
C:\tmp_4c73x2e\modules\packages\archive.py
C:\tmp_4c73x2e\modules\packages\chm.py
C:\tmp_4c73x2e\modules\packages\chromium.py
C:\tmp_4c73x2e\modules\packages\chrome.py
C:\tmp_4c73x2e\modules\packages\cpl.py
C:\tmp_4c73x2e\modules\packages\doc.py
C:\tmp_4c73x2e\modules\packages\dll.py
C:\tmp_4c73x2e\modules\packages\doc2016.py
C:\tmp_4c73x2e\modules\packages\exe.py
C:\tmp_4c73x2e\modules\packages\firefox.py
C:\tmp_4c73x2e\modules\packages\ie.py
C:\tmp_4c73x2e\modules\packages\inf.py
C:\tmp_4c73x2e\modules\packages\jar.py
C:\tmp_4c73x2e\modules\packages\inp.py
C:\tmp_4c73x2e\modules\packages\ichitaro.py
C:\tmp_4c73x2e\modules\packages\msbuild.py
C:\tmp_4c73x2e\modules\packages\lnk.py
C:\tmp_4c73x2e\modules\packages\msi.py
C:\tmp_4c73x2e\modules\packages\mht.py
C:\tmp_4c73x2e\modules\packages\msg.py
C:\tmp_4c73x2e\modules\packages\nsis.py
C:\tmp_4c73x2e\modules\packages\one.py
C:\tmp_4c73x2e\modules\packages\ollydbg.py
C:\tmp_4c73x2e\modules\packages\pdf.py
C:\tmp_4c73x2e\modules\packages\ppt.py
C:\tmp_4c73x2e\modules\packages\ppt2016.py
C:\tmp_4c73x2e\modules\packages\ps1.py
C:\tmp_4c73x2e\modules\packages\pub.py
C:\tmp_4c73x2e\modules\packages\pub2016.py
C:\tmp_4c73x2e\modules\packages\python.py
C:\tmp_4c73x2e\modules\packages\reg.py
C:\tmp_4c73x2e\modules\packages\regsvr.py
C:\tmp_4c73x2e\modules\packages\service.py
C:\tmp_4c73x2e\modules\packages\service_dll.py
C:\tmp_4c73x2e\modules\packages\Shellcode.py
C:\tmp_4c73x2e\modules\packages\swf.py
C:\tmp_4c73x2e\modules\packages\Unpacker_dll.py
C:\tmp_4c73x2e\modules\packages\Unpacker_ps1.py
C:\tmp_4c73x2e\modules\packages\rar.py
C:\tmp_4c73x2e\modules\packages\Unpacker_regsvr.py
C:\tmp_4c73x2e\modules\packages\vawtrak.py
C:\tmp_4c73x2e\modules\packages\vbs.py
C:\tmp_4c73x2e\modules\packages\wsf.py
C:\tmp_4c73x2e\modules\packages\xls.py
C:\tmp_4c73x2e\modules\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\packages\__init__.py
C:\tmp_4c73x2e\modules\packages\xls2016.py
C:\tmp_4c73x2e\modules\packages\zip.py
C:\tmp_4c73x2e\modules\packages\zip_compound.py
C:\tmp_4c73x2e\modules\packages\xps.py
C:\Users\Default\SendTo\Compressed (zipped) Folder.ZFSendToTarget
C:\Users\Default\SendTo\Desktop (create shortcut).DeskLink
C:\Users\Default\SendTo\Fax Recipient.lnk
C:\Users\Default\SendTo\Mail Recipient.MAPIMail
C:\Users\pacop\Configuraci\xf3n local\IconCache.db
C:\Users\pacop\Cookies\deprecated.cookie
C:\Users\pacop\Desktop\descarga.jpg
C:\Users\pacop\Downloads\registros_v2.ps1
C:\Users\pacop\Downloads\pizza.pyw
C:\Users\pacop\Favorites\Bing.url
C:\Users\pacop\Links\Desktop.lnk
C:\Users\pacop\Reciente\a.lnk
C:\Users\pacop\Reciente\cambios.lnk
C:\Users\pacop\Reciente\compra (2).lnk
C:\Users\pacop\Reciente\compra.lnk
C:\Users\pacop\Reciente\cosas.lnk
C:\Users\pacop\Reciente\desactivardisp.lnk
C:\Users\pacop\Reciente\descarga (1).lnk
C:\Users\pacop\Reciente\descarga.lnk
C:\Users\pacop\Reciente\Descargas.lnk
C:\Users\pacop\Reciente\Disco local (C) (2).lnk
C:\Users\pacop\Reciente\Disco local (C).lnk
C:\Users\pacop\Reciente\Este equipo.lnk
C:\Users\pacop\Reciente\images.lnk
C:\Users\pacop\Reciente\Internet.lnk
C:\Users\pacop\Reciente\ms-gamingoverlay---.lnk
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck- (2).lnk
C:\Users\pacop\Reciente\ms-gamingoverlay--kglcheck-.lnk
C:\Users\pacop\Reciente\ms-settingsnetwork-ethernet.lnk
C:\Users\pacop\Reciente\ms-settingsnetwork.lnk
C:\Users\pacop\Reciente\ms-settingswindowsupdate.lnk
C:\Users\pacop\Reciente\pizza.lnk
C:\Users\pacop\Reciente\prueba.lnk
C:\Users\pacop\Reciente\raton (2).lnk
C:\Users\pacop\Reciente\raton.lnk
C:\Users\pacop\Reciente\red.lnk
C:\Users\pacop\Reciente\registros.lnk
C:\Users\pacop\Reciente\registros_v2.lnk
C:\Users\pacop\Reciente\test.lnk
C:\Users\pacop\Reciente\Trabajo.lnk
C:\Users\pacop\Reciente\windowsdefender--enablertp-.lnk
C:\Users\pacop\Searches\Everywhere.search-ms
C:\Users\pacop\Searches\Indexed Locations.search-ms
C:\Users\pacop\Searches\winrt--{S-1-5-21-3747987639-2506909737-3802746916-1001}-.searchconnector-ms
C:\Users\pacop\SendTo\Compressed (zipped) Folder.ZFSendToTarget
C:\Users\pacop\SendTo\Desktop (create shortcut).DeskLink
C:\Users\pacop\SendTo\Documentos.mydocs
C:\Users\pacop\SendTo\Fax Recipient.lnk
C:\Users\pacop\SendTo\Mail Recipient.MAPIMail
C:\Users\pacop\SendTo\Transferencia de archivos Bluetooth.LNK
C:\Users\Public\Libraries\RecordedTV.library-ms
C:\Users\pacop\Downloads\7z2407-x64.exe
C:\Users\pacop\Downloads\ndp48-web.exe
C:\Archivos de programa\Google\Chrome\Application\chrome.VisualElementsManifest.xml
C:\Archivos de programa\Google\Chrome\Application\initial_preferences
C:\Archivos de programa\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa
C:\Archivos de programa\Google\Chrome\Application\chrome_proxy.exe
C:\Archivos de programa\VideoLAN\VLC\plugins\plugins.dat
C:\Archivos de programa\VideoLAN\VLC\skins\skin.catalog
C:\Archivos de programa\VideoLAN\VLC\skins\skin.dtd
C:\Archivos de programa\VideoLAN\VLC\skins\winamp2.xml
C:\Archivos de programa\VideoLAN\VLC\skins\default.vlt
C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml
C:\Program Files (x86)\Microsoft\Edge\Application\new_delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\Edge\Application\new_edge_proxy.exe
C:\Program Files (x86)\Microsoft\Edge\Application\new_pwahelper.exe
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\126.0.2592.113.manifest
C:\Users\pacop\Downloads\ChromeSetup.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\concrt140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\delegatedWebFeatures.sccd
C:\FDwSxoT\memory\9812.dmp
C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe
C:\Program Files (x86)\Microsoft\Edge\Application\new_msedge.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\Edge.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxil.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\elevation_service.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dual_engine_adapter_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\d3dcompiler_47.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\ffmpeg.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\identity_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\learning_tools.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libEGL.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\microsoft_shell_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mojo_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mip_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.dll.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\libGLESv2.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\icudtl.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_100_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_200_percent.pak
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_wer.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\dxcompiler.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_pwa_launcher.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140_codecvt_ids.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msvcp140.dll
C:\Users\pacop\Downloads\python-3.10.6.exe
C:\Users\pacop\Downloads\python-3.10.6-amd64.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\notification_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\msedge_elf.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\prefs_enclave_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onramp.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\pwahelper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\show_third_party_software_licenses.bat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneds.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\onnxruntime.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\v8_context_snapshot.bin
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vcruntime140_1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vccorlib140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader_icd.json
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\telclient.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wdag.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\webview2_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vulkan-1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\126.0.2592.87.manifest
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\concrt140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\delegatedWebFeatures.sccd
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\wns_push_client.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\oneauth.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxil.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Edge.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\vk_swiftshader.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\elevation_service.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dual_engine_adapter_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\identity_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\microsoft_shell_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\learning_tools.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mojo_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.dll.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\mspdf.dll
C:\Users\pacop\Downloads\vlc-3.0.21-win64.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mip_core.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe.sig
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_proxy.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_wer.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge_pwa_launcher.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msvcp140_codecvt_ids.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\msedge.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\notification_helper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onramp.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\prefs_enclave_x64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\icudtl.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\show_third_party_software_licenses.bat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vccorlib140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vcruntime140_1.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\vk_swiftshader_icd.json
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\pwahelper.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\webview2_integration.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\onnxruntime.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\EdgeUpdate.dat
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wdag.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeComRegisterShellARM64.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateBroker.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdate.exe
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\wns_push_client.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateComRegisterShell64.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateCore.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_af.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_am.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ar.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateOnDemand.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_az.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bg.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn-IN.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_as.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca-Es-VALENCIA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_bs.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ca.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cs.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_cy.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_da.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_de.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_el.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en-GB.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_en.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es-419.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_es.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_et.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_eu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fa.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fil.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr-CA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ga.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gd.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_fr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_gl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_hu.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_id.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_is.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_it.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_iw.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ja.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_km.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ko.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_kok.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lb.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lo.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ka.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lv.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ml.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_lt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ms.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_mt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ne.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nb.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nn.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_nl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pa.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_or.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-BR.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_pt-PT.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_quz.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ro.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ru.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sl.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sq.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-BA.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Cyrl-RS.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\dxcompiler.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sv.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_sr-Latn-RS.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ta.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_te.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_th.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tr.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_ug.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_tt.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_uk.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_vi.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-CN.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\NOTICE.TXT
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\msedgeupdateres_zh-TW.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\MicrosoftEdgeUpdateSetup.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_64.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psmachine_arm64.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_64.dll
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.193.5\psuser_arm64.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\oneauth.dll
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.113\resources.pak
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip File Manager.lnk
C:\ProgramData\Men\xfa Inicio\Programas\7-Zip\7-Zip Help.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Remote Desktop Connection.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Snipping Tool.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Steps Recorder.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Computer Management.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\dfrgui.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Disk Cleanup.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Component Services.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Wordpad.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Event Viewer.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\iSCSI Initiator.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Quick Assist.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Paint.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Accessories\Math Input Panel.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\RecoveryDrive.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Registry Editor.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\services.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (32-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\ODBC Data Sources (64-bit).lnk
C:\ProgramData\Men\xfa Inicio\Programas\System Tools\Task Manager.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Memory Diagnostics Tool.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Information.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Performance Monitor.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\System Configuration.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\Documentation.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VideoLAN Website.lnk
C:\ProgramData\Men\xfa Inicio\Programs\VideoLAN\Release Notes.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player - reset preferences and cache files.lnk
C:\ProgramData\Men\xfa Inicio\Programas\Administrative Tools\Task Scheduler.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player skinned.lnk
C:\ProgramData\Men\xfa Inicio\Programas\VideoLAN\VLC media player.lnk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-7e1cd04ad2694f1d89fd94ad5005a8e2-a696c450-a52d-45b4-844d-bb5b45de5f0c-7607.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.aggregators.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.tracing.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json.bk
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json
C:\ProgramData\Microsoft\IdentityCRL\INT\wlidsvcconfig.xml
C:\ProgramData\Microsoft\IdentityCRL\production\wlidsvcconfig.xml
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Clipper2,1.2.3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,ConcurrentDataStructures,0.2.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Google.Protobuf,3.26.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,HtmlAgilityPack,1.11.59
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,InAppFeedback.WinRT.WinUI3,2.2.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack,2.6.100-alpha
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,MessagePack.Annotations,2.6.100-alpha
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Connections.Abstractions,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Client,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.Http.Connections.Common,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Client.Core,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Common,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.Json,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.AspNetCore.SignalR.Protocols.MessagePack,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Data.Sqlite.Core,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Caching.Memory,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_6_27_9_11_35.etl
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.CommandLine,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.EnvironmentVariables,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.FileExtensions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Json,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.UserSecrets,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.DependencyInjection.Abstractions,8.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Diagnostics.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Features,8.0.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileProviders.Physical,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.FileSystemGlobbing,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Hosting.Abstractions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Http.Polly,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Abstractions,8.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Configuration,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Console,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.Debug,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventLog,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Logging.EventSource,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options,8.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Options.ConfigurationExtensions,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Primitives,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Graphics.Win2D,1.1.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Abstractions,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2024_7_2_11_12_17.etl
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.JsonWebTokens,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Logging,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.IdentityModel.Tokens,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Map.BMessage,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pal,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Pbap,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Bluetooth.Profiles,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Diagnostics,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.Obex,0.23051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.LibNanoApi.Managed,1.24032.33
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Internal.YourPhone.Vcard,0.22092.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.NET.StringTools,17.4.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Rest.ClientRuntime,2.3.24
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Toolkit.Uwp.Notifications,7.1.3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Xaml.Behaviors.Wpf,1.1.39
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Newtonsoft.Json,13.0.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Core,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.Extensions.Http,3.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Polly.RateLimiting,8.3.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy,8.0.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.Controls,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24051.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SharedUtilities.QrCodeGenerator,0.24061.4
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Buffers,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Codecs.Protobuf,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Common,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SpanNetty.Transport,0.7.2012.2221
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.bundle_e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.core,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.lib.e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,SQLitePCLRaw.provider.e_sqlite3,2.1.6
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Stateless,5.15.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IdentityModel.Tokens.Jwt,7.5.1
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Abstractions,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.IO.Pipelines,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Management,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,System.Threading.RateLimiting,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,TestableIO.System.IO.Abstractions.Wrappers,21.0.2
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.OnboardingSDK,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Auth,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,Microsoft.Extensions.Configuration.Binder,8.0.0
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Common,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.Onboarding,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.PlatformSdk.Protocol,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.ServicesClient,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24052.12
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24051.18
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24061.17
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP.SideChannel.Protocol,0.24052.12
C:\ProgramData\Microsoft\Network\Downloader\edb.chk
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\netcore,YourPhone.YPP
C:\ProgramData\Microsoft\Network\Downloader\edb00005.log
C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\mspdf.dll
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\3CCD5499-87A8-4B10-A215-608888DD3B55.vsch
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\Policy.vpol
C:\ProgramData\Microsoft\Network\Downloader\edbres00001.jrs
C:\ProgramData\USOShared\Logs\User\NotificationUx.095fa57d-ff28-4ace-b003-d80969b7eaf8.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.0e9fd7cc-1a55-4f04-aedb-4729c6d87ad1.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.193aa476-9ca8-4c7f-95f6-587478ce0d4a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1b41d6b3-dbf3-4dcd-b002-70b8233361ed.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1bd2b8ef-7918-48fc-83c6-1a6ce253c9d9.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.1f95d7c6-3855-4363-9f81-d243d8de1f15.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.2daf42e2-867a-45df-bda7-4ad150d60002.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.2df61257-f2a4-489a-9965-76193a56cb95.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.2f99ba07-e9ed-440d-90d8-c1e0edad8d0d.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.309119e8-a09e-4616-b8ce-b25153bfbc98.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.3c9b29b0-fe64-4f75-b8b9-df5d0e52972a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.4758898c-63ca-4d2c-adcc-ab93ccadd625.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.4de6b889-5844-4c31-9c0c-c473c3231c19.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.554a17c6-e729-497c-95d8-cfe28471a652.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.5921fa58-3dd4-4e42-94fb-33f9bb9358a8.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.726e8be6-2ee1-4513-8f38-cb0be019a0dd.1.etl
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json
C:\ProgramData\USOShared\Logs\User\NotificationUx.72f91d8c-1b7b-4aa3-8405-c757fd6ebcde.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.7e4a35ae-3981-4f2b-8288-ec478737578a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.80bd21cc-05a1-4df5-bbe5-0cee92ed1a45.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.820f69ff-91ff-478d-8a93-39274769fe9a.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.9a5bb5f1-7806-4244-9ec6-d5eb1e9d5f48.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.a09f1e5d-2191-4877-98c3-27d9b5806b57.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.a76d7b7f-1ace-4e8d-bc01-2581a469daef.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.b4cd1260-6516-4085-ae08-92b9bfc54534.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.aea00fe8-33dd-4236-bf2a-41c47700fd7c.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.be3ae783-8c8e-44a6-b6d0-1ac13a606b08.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.c202214f-8e1a-42ee-b597-347a053c7979.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.c3169fb6-fa66-4d96-9300-533aebc9f098.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.ce575aca-8918-49da-b848-1062455c66bc.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.d33c7d53-15e4-4f31-9dc2-a5c3af8bb1f7.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.e3399f10-561c-455b-bd30-a68298638ee5.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.f1e47454-d7a5-4821-958c-9cff4213b8d5.1.etl
C:\ProgramData\USOShared\Logs\User\NotificationUx.f3a1f03f-31f9-4590-b6b4-f69d7dd871b5.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.142f1637-5eb3-4fd5-81c3-cbdeb5f7dd0c.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.170e4249-3e7a-4b0d-a84b-ec8ab356bddc.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.230e5658-e645-4a53-85a3-4638be5cc751.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.2c41f663-ad28-4be7-9824-449179c453de.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.33cdb750-2f85-4b82-8cad-956b48256087.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.4566d46b-3bf9-4d19-a826-f848c6413e08.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.5e49103c-4274-48ec-a356-445f69835356.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.534961f0-f220-4832-ab76-84c3de1463f0.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.80076f1c-4788-40e7-9eb7-363f101b97c0.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.947a7ed1-5c30-4c88-8634-80550dcf13c1.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.9d354caa-5e1a-4227-84e9-f39e652f73fb.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.c6dba209-1710-4598-b687-e8fa5081de94.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.f6ac4910-dfde-4b2e-afad-993bf0473d96.1.etl
C:\ProgramData\USOShared\Logs\User\NotifyIcon.cffac2f9-4b7c-4d48-997d-6910548288a7.1.etl
C:\tmp228rx8rl\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\rand.cpython-310.pyc
C:\ProgramData\USOShared\Logs\User\UpdateUx.cc112a0b-857a-4105-a70f-a03e89907d9d.1.etl
C:\tmp228rx8rl\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp228rx8rl\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp228rx8rl\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp228rx8rl\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp228rx8rl\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp228rx8rl\tests\lib\api\test_process.py
C:\tmp228rx8rl\tests\lib\common\test_abstracts.py
C:\tmp228rx8rl\tests\modules\packages\test_ps1.py
C:\tmp3bs9izg4\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp3bs9izg4\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp3bs9izg4\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp3bs9izg4\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp3bs9izg4\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp3bs9izg4\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp3bs9izg4\tests\lib\api\test_process.py
C:\tmp3bs9izg4\tests\lib\common\test_abstracts.py
C:\tmp3bs9izg4\tests\modules\packages\test_ps1.py
C:\tmp3ljmycja\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp3ljmycja\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmp3ljmycja\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmp3ljmycja\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmp3ljmycja\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp3ljmycja\tests\lib\api\test_process.py
C:\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_Autopilot_2024_6_19_12_44_57.etl
C:\tmp3ljmycja\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmp3ljmycja\tests\lib\common\test_abstracts.py
C:\tmp3ljmycja\tests\modules\packages\test_ps1.py
C:\tmpb9ol310j\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpb9ol310j\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpb9ol310j\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpb9ol310j\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpb9ol310j\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpb9ol310j\tests\lib\api\test_process.py
C:\tmpb9ol310j\tests\modules\packages\test_ps1.py
C:\tmpb9ol310j\tests\lib\common\test_abstracts.py
C:\tmpcynaajs6\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpcynaajs6\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpcynaajs6\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpcynaajs6\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpcynaajs6\tests\lib\api\test_process.py
C:\tmpcynaajs6\tests\modules\packages\test_ps1.py
C:\tmpd5tr1_rv\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpd5tr1_rv\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpd5tr1_rv\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmpd5tr1_rv\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpd5tr1_rv\tests\lib\api\test_process.py
C:\tmpeoix3ml5\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpeoix3ml5\lib\api\__pycache__\process.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpeoix3ml5\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpeoix3ml5\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\procmon.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpeoix3ml5\tests\lib\api\test_process.py
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpeoix3ml5\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\tmpeoix3ml5\tests\modules\packages\test_ps1.py
C:\tmpeoix3ml5\tests\lib\common\test_abstracts.py
C:\tmph_w19omx\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\lib\api\__pycache__\process.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\common.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\results.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\config.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmph_w19omx\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\log.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmph_w19omx\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\common.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\constants.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\exceptions.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\common\__pycache__\errors.cpython-310.pyc
C:\ProgramData\Microsoft\Network\Downloader\edbres00002.jrs
C:\tmpyhyv52bd\lib\common\__pycache__\results.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\config.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\log.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\startup.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\usage.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmpyhyv52bd\modules\packages\__pycache__\__init__.cpython-310.pyc
C:\tmpyhyv52bd\tests\lib\api\test_process.py
C:\tmpyhyv52bd\tests\lib\common\test_abstracts.py
C:\tmp_4c73x2e\lib\api\__pycache__\screenshot.cpython-310.pyc
C:\tmpyhyv52bd\tests\modules\packages\test_ps1.py
C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log
C:\tmp_4c73x2e\lib\api\__pycache__\utils.cpython-310.pyc
C:\tmp_4c73x2e\lib\api\__pycache__\process.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\common.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\abstracts.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\defines.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\hashing.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\errors.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\parse_pe.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\rand.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\registry.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\compound.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\config.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\packages.cpython-310.pyc
C:\tmpyhyv52bd\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp_4c73x2e\lib\common\__pycache__\results.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\log.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi_collector.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\autoruns.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\browser.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\curtain.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\digisig.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\pipe.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\privileges.cpython-310.pyc
C:\tmp_4c73x2e\lib\core\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\disguise.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\filepickup.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\html_scraper.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\evtx.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\pre_script.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\amsi.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\permissions.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\recentfiles.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\during_script.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\human.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\screenshots.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\__init__.cpython-310.pyc
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\sysmon.cpython-310.pyc
C:\tmp_4c73x2e\modules\packages\__pycache__\exe.cpython-310.pyc
C:\tmp_4c73x2e\tests\lib\api\test_process.py
C:\tmp_4c73x2e\tests\lib\common\test_abstracts.py
C:\tmp_4c73x2e\tests\modules\packages\test_ps1.py
C:\tmp_4c73x2e\modules\auxiliary\__pycache__\tlsdump.cpython-310.pyc
C:\Users\Default\Men\xfa Inicio\Programas\OneDrive.lnk
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\a94bb0b5a18bc1de.cdp
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdpresource
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.pacop.cdpresource
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst
C:\Users\pacop\Configuraci\xf3n local\ConnectedDevicesPlatform\L.admin.cdp
C:\Users\pacop\Configuraci\xf3n local\Historial\desktop.ini
C:\Users\pacop\Configuraci\xf3n local\Temp\.ses
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2F1.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\BITE2E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\cv_debug.log
C:\Users\pacop\Configuraci\xf3n local\Temp\wct759.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct1FA.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct8E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct9C31.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wct11CD.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E0.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E1.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctE2E2.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctDE31.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\wctD699.tmp
C:\Users\pacop\Configuraci\xf3n local\Temp\9f4c690fdf0c329b419e.exe
C:\Users\pacop\Desktop\cosas\descarga (1).jpg
C:\Users\pacop\Desktop\cosas\images.jpg
C:\Users\pacop\Configuraci\xf3n local\Temp\agenttesla.exe
C:\Users\pacop\Desktop\cosas\descarga.jpg
C:\Users\pacop\Men\xfa Inicio\Programas\OneDrive.lnk
C:\Users\pacop\Reciente\AutomaticDestinations\3120801ba34a2faa.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\573770283dc3d854.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\590aee7bdd69b59b.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\5d696d521de238c3.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\7cc515ce9647ec58.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\761ad72d4964582f.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\40b6c2ffc92fa1cd.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\da4554e92cc91a44.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
C:\Users\pacop\Reciente\AutomaticDestinations\f18460fded109990.automaticDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\590aee7bdd69b59b.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\7e4dca80246863e3.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\f01b4d95cf55d32a.customDestinations-ms
C:\Users\pacop\Reciente\CustomDestinations\8e4e81d9adc545b8.customDestinations-ms
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\126.0.6478.185.manifest
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.dll.sig
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome.exe.sig
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_wer.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_100_percent.pak
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_elf.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_pwa_launcher.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\chrome_200_percent.pak
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\eventlog_provider.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxil.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\elevation_service.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libEGL.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\mojo_core.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\d3dcompiler_47.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\notification_helper.exe
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\libGLESv2.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\icudtl.dat
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\v8_context_snapshot.bin
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader_icd.json
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\optimization_guide_internal.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vulkan-1.dll
C:\Archivos de programa\VideoLAN\VLC\lua\extensions\VLSub.luac
C:\Archivos de programa\VideoLAN\VLC\lua\http\custom.lua
C:\Archivos de programa\VideoLAN\VLC\lua\http\favicon.ico
C:\Archivos de programa\VideoLAN\VLC\lua\http\index.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_browse.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_equalizer.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\mobile_view.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\view.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm.html
C:\Archivos de programa\VideoLAN\VLC\lua\http\vlm_export.html
C:\Archivos de programa\VideoLAN\VLC\lua\intf\cli.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dummy.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\dumpmeta.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\http.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\luac.luac
C:\Archivos de programa\VideoLAN\VLC\lua\intf\telnet.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\common.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\dkjson.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\sandbox.luac
C:\Archivos de programa\VideoLAN\VLC\lua\modules\simplexml.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_streams.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\anevia_xml.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\appletrailers.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\cue.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\dailymotion.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\jamendo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\koreus.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\liveleak.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\newgrounds.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\soundcloud.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\twitch.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vimeo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\vocaroo.luac
C:\Archivos de programa\VideoLAN\VLC\lua\playlist\youtube.luac
C:\Archivos de programa\VideoLAN\VLC\lua\sd\icecast.luac
C:\Archivos de programa\VideoLAN\VLC\lua\sd\jamendo.luac
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
C:\Archivos de programa\Google\Chrome\Temp\scoped_dir9620_1239862797\old_chrome.exe
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libattachment_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\resources.pak
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\vk_swiftshader.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libftp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libimem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libhttps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblive555_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libnfs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libdcp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsatip_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librist_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libshm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsmb_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtcp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libudp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\librtp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvdr_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libsftp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_rist_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access\libvnc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll
C:\Archivos de programa\Google\Chrome\Application\126.0.6478.185\dxcompiler.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdca_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libaom_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libg711_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmft_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libttml_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libau_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libes_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libty_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libx265_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\librss_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglinterop_dxva2_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
C:\Archivos de programa\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\126.0.2592.113.manifest
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\concrt140.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\cookie_exporter.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\delegatedWebFeatures.sccd
C:\Archivos de programa\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dxil.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\Edge.dat
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\EdgeWebView.dat
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\dual_engine_adapter_x64.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\eventlog_provider.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\elevation_service.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\d3dcompiler_47.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\identity_helper.exe.manifest
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\ffmpeg.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\learning_tools.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libEGL.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\microsoft_shell_integration.dll
C:\Archivos de programa\VideoLAN\VLC\plugins\gui\libqt_plugin.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_protection_sdk.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mojo_core.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\mip_core.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.dll.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\libGLESv2.dll
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe.sig
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge_100_percent.pak
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedgewebview2.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\msedge.exe
C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.113\icudtl.dat
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000033.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000034.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000035.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000036.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000037.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000038.db
C:\Users\pacop\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000039.db

Registry Keys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\LdapClientIntegrity
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\UseOldHostResolutionOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\UseHostnameAsAlias
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\RecvBufferSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP\BlackBasta_03.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\es-ES
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\es-ES
HKEY_CLASSES_ROOT\.basta\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\DefaultIcon\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\BlackBasta_03.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\es-ES
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\es-ES\Latest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\es-ES
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\es
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\vssadmin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE1C7110-2F60-11D3-8A39-00C04F72D8E3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE1C7110-2F60-11D3-8A39-00C04F72D8E3}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE1C7110-2F60-11D3-8A39-00C04F72D8E3}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\MonitorRegistry
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ThumbnailCache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\WCOSEnumerationBaselineAllowedlist
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AllowedEnumeration
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AllowedEnumeration
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders\StorageDelegateSuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders\StorageDelegate
HKEY_CLASSES_ROOT\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\CLSID
HKEY_CLASSES_ROOT\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32\LoadWithoutCOM
HKEY_CURRENT_USER\Software\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\
HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_CLASSES_ROOT\CLSID\{04731B67-D933-450A-90E6-4ACD2E9408FE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{04731B67-D933-450a-90E6-4ACD2E9408FE}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{04731B67-D933-450A-90E6-4ACD2E9408FE}
HKEY_CLASSES_ROOT\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{11016101-E366-4D22-BC06-4ADA335C892B}
HKEY_CLASSES_ROOT\CLSID\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}\SortOrderIndex
HKEY_CLASSES_ROOT\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{4336A54D-038B-4685-AB02-99BB52D3FB8B}
HKEY_CLASSES_ROOT\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\
HKEY_CLASSES_ROOT\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKEY_CLASSES_ROOT\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\Instance
HKEY_CLASSES_ROOT\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_CLASSES_ROOT\CLSID\{5B934B42-522B-4C34-BBFE-37A3EF7B9C90}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b934b42-522b-4c34-bbfe-37a3ef7b9c90}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{5B934B42-522B-4C34-BBFE-37A3EF7B9C90}
HKEY_CLASSES_ROOT\CLSID\{89D83576-6BD1-4C86-9454-BEB04E94C819}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{89D83576-6BD1-4c86-9454-BEB04E94C819}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{89D83576-6BD1-4C86-9454-BEB04E94C819}
HKEY_CLASSES_ROOT\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}
HKEY_CLASSES_ROOT\CLSID\{9343812E-1C37-4A49-A12E-4B2D810D956B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9343812e-1c37-4a49-a12e-4b2d810d956b}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{9343812E-1C37-4A49-A12E-4B2D810D956B}
HKEY_CURRENT_USER\Software\Classes\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}
HKEY_CLASSES_ROOT\CLSID\{A00EE528-EBD9-48B8-944A-8942113D46AC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a00ee528-ebd9-48b8-944a-8942113d46ac}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{A00EE528-EBD9-48B8-944A-8942113D46AC}
HKEY_CURRENT_USER\Software\Classes\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\SortOrderIndex
HKEY_CLASSES_ROOT\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\Instance
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\HomeGroup\TestHooks\UIStatusCacheDebugOverride
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\HomeGroup\UIStatusCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}
HKEY_CLASSES_ROOT\CLSID\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}
HKEY_CLASSES_ROOT\CLSID\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{daf95313-e44d-46af-be1b-cbacea2c3065}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}
HKEY_CLASSES_ROOT\CLSID\{E345F35F-9397-435C-8F95-4E922C26259E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e345f35f-9397-435c-8f95-4e922c26259e}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{E345F35F-9397-435C-8F95-4E922C26259E}
HKEY_CLASSES_ROOT\CLSID\{EDC978D6-4D53-4B2F-A265-5805674BE568}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EDC978D6-4D53-4b2f-A265-5805674BE568}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{EDC978D6-4D53-4B2F-A265-5805674BE568}
HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\SortOrderIndex
HKEY_CLASSES_ROOT\CLSID\{F8278C54-A712-415B-B593-B77A2BE0DDA9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8278c54-a712-415b-b593-b77a2be0dda9}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{F8278C54-A712-415B-B593-B77A2BE0DDA9}
HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{018D5C66-4533-4307-9B53-224DE2ED1FE6}
HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\CLSID
HKEY_CURRENT_USER\Software\Classes\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\Attributes
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\DescriptionID
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\HelpTopic
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\RecursiveSearch
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\
HKEY_CLASSES_ROOT\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance
HKEY_CURRENT_USER\Software\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\CLSID
HKEY_CLASSES_ROOT\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\HideNonRemovableDrives
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\UseRemovableStorageRegPath
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\UseRemovableDrivesRegPath
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableDrives
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\NoDelegateSearchRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\HideNonStorageServiceMountedDrives
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\ForceAllDrivesRemovable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\ShowAllOpticalDevices
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Storage
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableDrives
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableDrives\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableDrives\DelegateFolders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\RemovableDrives
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\RemovableDrives\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{df653500-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{df653500-0000-0000-0000-300300000000}\Generation
HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
HKEY_CURRENT_USER\Software\Classes\Drive\shellex\FolderExtensions
HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NeverShowDrivesMask
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideDrivesWithNoMedia
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2c670971-2e31-11ef-9daa-806e6f6e6963}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2c670971-2e31-11ef-9daa-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\Software\Classes\Drive\shellex\FolderExtensions
HKEY_CLASSES_ROOT\CLSID\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}\Instance
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives\Volume{2c670971-2e31-11ef-9daa-806e6f6e6963}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives\Volume{2c670971-2e31-11ef-9daa-806e6f6e6963}\IsImapiDataBurnSupported
HKEY_CLASSES_ROOT\Directory
HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\IconHandler
HKEY_CLASSES_ROOT\Folder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\IconHandler
HKEY_LOCAL_MACHINE\Software\Classes\AllFilesystemObjects
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\IconHandler
HKEY_CURRENT_USER\Software\Classes\Directory\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
HKEY_CURRENT_USER\Software\Classes\Directory\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
HKEY_CURRENT_USER\Software\Classes\Directory\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\Clsid
HKEY_CURRENT_USER\Software\Classes\Directory\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
HKEY_CURRENT_USER\Software\Classes\Directory\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\Directory\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\KindMap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.jpg
HKEY_CLASSES_ROOT\.jpg
HKEY_CURRENT_USER\Software\Classes\.jpg\Content Type
HKEY_CURRENT_USER\Software\Classes\.jpg\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice\Hash
HKEY_CLASSES_ROOT\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\CurVer
HKEY_LOCAL_MACHINE\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\CurVer
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.jpg
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\image
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\ShellEx\IconHandler
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\DocObject
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\BrowseInPlace
HKEY_LOCAL_MACHINE\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\Clsid
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\IsShortcut
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.lnk
HKEY_CLASSES_ROOT\.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
HKEY_CLASSES_ROOT\lnkfile
HKEY_CURRENT_USER\Software\Classes\lnkfile\CurVer
HKEY_LOCAL_MACHINE\Software\Classes\lnkfile\CurVer
HKEY_CURRENT_USER\Software\Classes\lnkfile\
HKEY_CURRENT_USER\Software\Classes\lnkfile\ShellEx\IconHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\IconHandler\(Default)
HKEY_CURRENT_USER\Software\Classes\lnkfile\DocObject
HKEY_CLASSES_ROOT\SystemFileAssociations\.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\DocObject
HKEY_CURRENT_USER\Software\Classes\lnkfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\BrowseInPlace
HKEY_CURRENT_USER\Software\Classes\.lnk
HKEY_CURRENT_USER\Software\Classes\lnkfile\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\CLSID\(Default)
HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\Implemented Categories\{00021490-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\lnkfile\IsShortcut
HKEY_CURRENT_USER\Software\Classes\lnkfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\lnkfile\NeverShowExt
HKEY_CLASSES_ROOT\microsoft-edge
HKEY_CURRENT_USER\Software\Classes\microsoft-edge\URL Protocol
HKEY_CURRENT_USER\Software\RegisteredApplications
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpkywr67r0wf5bhddtfg25nmc88t8x2q3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.19041.1266_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX6g3bxy0n6cf5c4c2129qkw7sretb4ssh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.19041.1023_neutral__cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXb4mqh9pxya93ap1mw036pvy5tbeddrvg
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.AAD.BrokerPlugin_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXs9b9q0m03vbnjxt30ypbtq2ftebfvg7t
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.19041.1023_neutral__cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX7cky5w40tqp2xxs6b72exyvsttezngeb
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19041.1000.0_x64__cw5n1h2txyewy\ScreenClipping\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXryngjssvhcjfeyab24rg8q5zderqsjym
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19041.1000.0_x64__cw5n1h2txyewy\InputApp\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXn9nvas4e60xvcswfx8rjqpvd2hb4e04v
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.9.19041_neutral_neutral_cw5n1h2txyewy\ShellFeedsUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1cgv28nm26nmck3p06fenv4mz3f5kc89
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.9.19041_neutral_neutral_cw5n1h2txyewy\CortanaUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXbpvt3ybb9z170k77w6aygrkk3dpbx7mb
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4rkxz9wxfwydqgfq1te5fwj9sp62tt2s
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.XGpuEjectDialog\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpvggj8wtagvqq1trs4afp513ydqb63tt
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.PrintDialog\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.PrintDialog\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpb2rprh78ppcr2kwetykjxfzjgj219r0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Microsoft.ZuneVideo\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXzeyx06t5hke6zf29z17sh4594fevh64m
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ECApp_10.0.19041.1023_neutral__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxevv7w4echwe3sagycz14jet3p1yv42y
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX25rf19q671kf1xxjz0gq5zzj6p2cvggj
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameCallableUI_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy\Microsoft.XboxGameCallableUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXm9cv9mbrjpp9bzhz5hp4kfhkge633vmf
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXa824bp5bsv8tjsvn1pd1gjfktpk8z4wk
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ParentalControls_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXzqzjchey2xvwqp5nq4grdst6n41vq0q8
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.SecHealthUI_10.0.19041.1865_neutral__cw5n1h2txyewy\SecHealthUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4x2vc5g4p8m2g02hxkhw0fzwy95v8884
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.19041.1949_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX965kgq2vdagyyvkr19xz1tznhv8zk22p
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXdknxgvjetxtjg5qstqavf87td6r5mggf
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.19041.1949_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\OneDrive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Capabilities\UrlAssociations
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXg8y9gbj2acqy3f00ze6xvyggrn4gx52h
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGamingOverlay_7.124.5142.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGamingOverlay_7.124.5142.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX103r29wfxg0qfv27rc6g1266p80etspv
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftSolitaireCollection_4.19.5100.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftSolitaireCollection_4.19.5100.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX3nfyrvh5v44keypr93rap915a4x4wf9e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.StorePurchaseApp_22403.1401.1.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.StorePurchaseApp_22403.1401.1.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhx21prcvqqa8a90yc551k1ed62rnhscm
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Getstarted_10.2312.1.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Getstarted_10.2312.1.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXad7xaxkz654153ytb1w9g15v02w69ysc
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.manageaccounts\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.manageaccounts\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXqtfb4sfp80ndeef397vvdsm1cxa2zmqh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.calendar\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.calendar\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXr740585a8f3pa1xj9yvw1nbmdhvxw0jw
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.mail\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.mail\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXywx2qkz1wry05ezvs9t7s1d5myqq57nb
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftOfficeHub_18.2405.1221.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftOfficeHub\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftOfficeHub_18.2405.1221.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftOfficeHub\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXveh2ktf0zxzfhebt0a4dk2gt25zs2zpn
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX65rt952nmtan0wae8jjfq9ezj57wrcz3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxkpqhfe034exe7w50trnmgx7jf2njew0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXcgsgh5jyp73m2mqpj1khbpa00n9zjx5e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MixedReality.Portal_2000.21051.1282.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MixedReality.Portal_2000.21051.1282.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0b068fkjwjba9hca74gzgb41ga6hewj5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Microsoft3DViewer_7.2405.12012.0_x64__8wekyb3d8bbwe\Microsoft.Microsoft3DViewer\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Microsoft3DViewer_7.2405.12012.0_x64__8wekyb3d8bbwe\Microsoft.Microsoft3DViewer\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX2fj1syzmys46t5caejk0kchmrqkm5p68
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_15.120.3207.0_x64__kzf8qxf38zg5c\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_15.120.3207.0_x64__kzf8qxf38zg5c\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXtn4aknrnefvk9qxg5v3n0w729jhp2nh9
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxmcv2e4p0wphv9yc6rfsvra1jfh6yspe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ScreenSketch_10.2008.3001.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ScreenSketch_10.2008.3001.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhym7ek6y6n47b31ntwhydd20ga438ze4
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneMusic_11.2405.8.0_x64__8wekyb3d8bbwe\Microsoft.ZuneMusic\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneMusic_11.2405.8.0_x64__8wekyb3d8bbwe\Microsoft.ZuneMusic\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXv93e4smt0fnhea515bkrj4a3r5b7eymh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.GetHelp_10.2403.20861.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.GetHelp_10.2403.20861.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX2h7vrw97tk8aw2thnyw4smtp3a9h8msj
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsSoundRecorder_10.2103.28.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsSoundRecorder_10.2103.28.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfccg2tj4e1nseqsnjk27atjjrkwewak2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX93zfxnv53xw2egcj6y1b3cybn7jsdvqy
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.AAD.BrokerPlugin_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.AAD.BrokerPlugin_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXc0s86w2wtvq6haj4qdsx6d39n6gjnd25
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXymzghaemwkveyxv10s2sdpvh29xd826s
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1m43v2pes5tjk9j68m6hbj9ns4t1vdpz
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXc0bbpcmbkgwnb1f2n93th99dx5sfhhxz
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\ShellFeedsUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\ShellFeedsUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX8qw75jw691z4w1ky847v1hkvv3jr77gp
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\CortanaUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\CortanaUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX832xa6v73scngkfqneeyweq93bydyndc
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\WindowsBackup\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\WindowsBackup\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpf910bs9b2wrpn7q5wy0zf43trqradpv
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\ScreenClipping\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\ScreenClipping\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXnt0vy7mv5v708p3m7t099fpb513h1z6q
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\InputApp\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\InputApp\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXw5w6xq8n6aftnek5snsh0rkqhvj6f2p4
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameCallableUI_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\Microsoft.XboxGameCallableUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameCallableUI_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\Microsoft.XboxGameCallableUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4p4zvrn9j49073c60wm0cz37a6jkpxf6
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.XGpuEjectDialog\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.XGpuEjectDialog\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX9a850kvzvsgyncqn3jz8a7ncp5wysag3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.SecHealthUI_10.0.19041.4239_neutral__cw5n1h2txyewy\SecHealthUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.SecHealthUI_10.0.19041.4239_neutral__cw5n1h2txyewy\SecHealthUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfvprxfzapdmm9t1aaxajchrn44c24ja5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ParentalControls_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ParentalControls_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXga5x2qpq92trzbb61see2b87mkw9mw8e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX67q2rpn2mfpeka4966fq92zw3cj57qh0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ECApp_10.0.19041.4239_neutral__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ECApp_10.0.19041.4239_neutral__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0dem14bzwfr4yx19b55q76wgznh9yrz2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpjq7xfsk6xawd0pnzgvjxyskhc5t02gg
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.People_10.2202.100.0_x64__8wekyb3d8bbwe\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.People_10.2202.100.0_x64__8wekyb3d8bbwe\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXq9hr4jc4mqaw6ba1vkftrfb6patk8g4d
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneVideo_10.22091.10061.0_x64__8wekyb3d8bbwe\Microsoft.ZuneVideo\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneVideo_10.22091.10061.0_x64__8wekyb3d8bbwe\Microsoft.ZuneVideo\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXbt8frk9dqjm57630bcdbjwt83fzq6qpa
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsAlarms_11.2403.8.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsAlarms_11.2403.8.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXgzzfreat371nkms9k7gpb45n6ha46qgn
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Xbox.TCUI_1.24.10001.0_x64__8wekyb3d8bbwe\Microsoft.Xbox.TCUI\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Xbox.TCUI_1.24.10001.0_x64__8wekyb3d8bbwe\Microsoft.Xbox.TCUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1c8ewzb0d3argyb68es59f3a99fjgbdh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.BingWeather_4.53.61401.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.BingWeather_4.53.61401.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfjyxv98bc0jz2yrs0z0j792g76qr92sf
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsMaps_11.2403.4.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsMaps_11.2403.4.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX8f72qqeyxa5t2qazxnv6rh1c2s6gyck5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\winget\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\winget\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhk6y9hf580hrpp1sq59tazqj0rdgfcs2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXrth4b5h2w80n0h0thbhz44bgw6sr7ds2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.DevHome_0.1600.561.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.DevHome_0.1600.561.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXrc7e2kd0w5cr9we4t8et5h113yf15jp1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.YourPhone_1.24061.93.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.YourPhone_1.24061.93.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXyd2yw31293dh3yzq3dbzy04nsgmmqgsy
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX74k68hrjdcxqw97jd4v0x9fn7f2wbcb1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCamera_2024.2405.19.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCamera_2024.2405.19.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXw8k2rpa7wcqcddjh8h8dntv0r2yffs63
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsFeedbackHub_1.2405.21481.0_x64__8wekyb3d8bbwe\App\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsFeedbackHub_1.2405.21481.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0y6wwzf0q1pkzvarr8fjfh3e76gcaek5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Office.OneNote_16001.14326.21942.0_x64__8wekyb3d8bbwe\microsoft.onenoteim\Capabilities\UrlAssociations
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Office.OneNote_16001.14326.21942.0_x64__8wekyb3d8bbwe\microsoft.onenoteim\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\Software\RegisteredApplications
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\File Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Address Book
HKEY_LOCAL_MACHINE\Software\Clients\Contacts\Address Book\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Contacts\Address Book\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Disc Image Burner
HKEY_LOCAL_MACHINE\Software\Microsoft\IsoBurn\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Search
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Search\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Internet Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Paint
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Notepad
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Notepad\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Wordpad
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Media Player
HKEY_LOCAL_MACHINE\Software\Clients\Media\Windows Media Player\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Player\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Photo Viewer
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Photo Viewer\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Microsoft Edge
HKEY_LOCAL_MACHINE\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Hidden
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Google Chrome
HKEY_LOCAL_MACHINE\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\VLC
HKEY_LOCAL_MACHINE\Software\Clients\Media\VLC\Capabilities\UrlAssociations
HKEY_LOCAL_MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Extensions\windows.protocol\microsoft-edge
HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\UserChoice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\UserChoice\Hash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\
HKEY_CLASSES_ROOT\MSEdgeHTM
HKEY_CURRENT_USER\Software\Classes\MSEdgeHTM\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\NoStaticDefaultVerb
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open\NeverDefault
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open\FriendlyAppName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarSmallIcons
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\Flighting\Override
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\Flighting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\Flighting\Current
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\Flighting\0\SearchBoxWidth
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\Flighting\0\SearchBoxWidth\Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SearchBoxThreshold
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\ImmersiveSearch
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Feeds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\IsFeedsAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\HeadlinesOnboardingComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\EnShellFeedsTaskbarViewMode
HKEY_CLASSES_ROOT\CLSID\{4234D49B-0245-4DF3-B780-3893943456E1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4234d49b-0245-4df3-b780-3893943456e1}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{4234D49B-0245-4DF3-B780-3893943456E1}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{4234D49B-0245-4DF3-B780-3893943456E1}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{4234D49B-0245-4DF3-B780-3893943456E1}
HKEY_LOCAL_MACHINE\Software\Classes\lnkfile\ShellEx\IconHandler
HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\NoOplock
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\UseOutOfProcHandlerCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\EnableShareDenyNone
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.exe
HKEY_CLASSES_ROOT\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)
HKEY_CLASSES_ROOT\exefile
HKEY_CURRENT_USER\Software\Classes\exefile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Metadata
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid\S-1-5-21-3747987639-2506909737-3802746916-1001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index\UserAndPackage\3^1ab
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index\UserAndPackage\0^1ab
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1ab
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1ab\InstalledLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1ab\MutableLink
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\Clsid
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\IsShortcut
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\NeverShowExt
HKEY_CLASSES_ROOT\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\CLSID
HKEY_CURRENT_USER\Software\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\es
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\PolicyType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\Behavior
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\MergeAlgorithm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\RegKeyPathRedirectMapped
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\RegKeyPathRedirect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\grouppolicyname
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataDevice
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataBoth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\65Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\Value
HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\current\Device\DataProtection
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\DataProtection\EDPShowIcons
HKEY_CLASSES_ROOT\.png
HKEY_CURRENT_USER\Software\Classes\.png\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice\Hash
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\Progid
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.png
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.png
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.png\(Default)
HKEY_CLASSES_ROOT\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}\OverrideFileSystemProperties
HKEY_CLASSES_ROOT\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\NoOplock
HKEY_CLASSES_ROOT\ExplorerCLSIDFlags\{A38B883C-1682-497E-97B0-0A3A9E801682}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\UseOutOfProcHandlerCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\Zvpebfbsg.Jvaqbjf.FuryyRkcrevraprUbfg_pj5a1u2gklrjl!Ncc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_CLASSES_ROOT\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_CLASSES_ROOT\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{59031A47-3F72-44A7-89C5-5595FE6B30EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{59031A47-3F72-44A7-89C5-5595FE6B30EE}
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\System.HideOnDesktop
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{018D5C66-4533-4307-9B53-224DE2ED1FE6}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\(Default)
HKEY_CURRENT_USER\Software\Classes\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\LocalizedString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\CLSID
HKEY_CURRENT_USER\Software\Classes\CLSID\{2CC5CA98-6485-489A-920E-B3E88A6CCCE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.FileAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\SortOrderIndex
HKEY_CLASSES_ROOT\CLSID\{64693913-1C21-4F30-A98F-4E52906D3B56}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64693913-1c21-4f30-a98f-4e52906d3b56}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{64693913-1C21-4F30-A98F-4E52906D3B56}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.lnk
HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties
HKEY_CLASSES_ROOT\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemNameDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.DateModified
HKEY_CURRENT_USER\Software\Classes\CLSID\{a00ee528-ebd9-48b8-944a-8942113d46ac}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.Kind
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemPathDisplay
HKEY_CLASSES_ROOT\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemPathDisplayNarrow
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderNameDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderPathDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderPathDisplayNarrow
HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\PropertyHandler
HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\PropertyHandler
HKEY_CLASSES_ROOT\AllFilesystemObjects
HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.jpg
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpg\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop\IconLayouts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop\IconNameVersion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
HKEY_CURRENT_USER\\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\PaintDesktopVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace\NameCustomizations
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.Kind
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{1E3EE840-BC2B-476C-8237-2ACD1A839B22} 3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellEx\IconHandler
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon\OpenIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{446D16B1-8DAD-4870-A748-402EA43D788C} 100
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.DateModified
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.ThumbnailCacheId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{00021401-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.exe\(Default)
HKEY_CLASSES_ROOT\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\OverrideFileSystemProperties
HKEY_CLASSES_ROOT\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\NoOplock
HKEY_CLASSES_ROOT\ExplorerCLSIDFlags\{66742402-F9B9-11D1-A202-0000F81FEDEE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\UseOutOfProcHandlerCache
HKEY_CURRENT_USER\Software\Classes\CLSID\{00021401-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\DefaultIcon\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageOrigin
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HomeGroupProvider\ServiceData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\PackageStatus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageFullName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageFamily
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Flags2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Volume
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\OSMaxVersionTested
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\InstalledLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\MutableLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\MutableLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\TargetDeviceFamilyName
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\OEM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index\UserAndPackage\3^7d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index\UserAndPackage\0^7d
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\CachedMergedResourcesPriFileName
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Mrt
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\Language
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\microsoft.windows.photos_8wekyb3d8bbwe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.language-es_8wekyb3d8bbwe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.language-es_8wekyb3d8bbwe\Flags
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Flags
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\Control Panel\International\User Profile
HKEY_CURRENT_USER\Control Panel\International\User Profile\Languages
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\ManifestLanguagesList
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\OverrideLanguagesList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateOnHostFlags
HKEY_CURRENT_USER\Control Panel\International\Geo
HKEY_CURRENT_USER\Control Panel\International\Geo\Nation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourceQualifiers
HKEY_CURRENT_USER\Software\Classes\Local Settings\MrtCache\C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3747987639-2506909737-3802746916-1001-MergedResources-3.pri
HKEY_CURRENT_USER\Software\Classes\Local Settings\MrtCache\C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3747987639-2506909737-3802746916-1001-MergedResources-3.pri\1dac2362cae047c\cab94c9e
HKEY_CURRENT_USER\Software\Classes\Local Settings\MrtCache\C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3747987639-2506909737-3802746916-1001-MergedResources-3.pri\1dac2362cae047c\cab94c9e\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/files/assets/photoslogoextensions.png}
HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\.jpg\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\Software\Classes\.jpg\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.jpg\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\image\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\Clsid
HKEY_CLASSES_ROOT\*
HKEY_CURRENT_USER\Software\Classes\*\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\Software\Classes\*\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\Treatment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\Treatment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\Treatment
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\TypeOverLay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\TypeOverLay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\TypeOverLay
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\LastUpdate
HKEY_CURRENT_USER\Software\Microsoft\OneDrive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\MainAccount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\UserFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\cid
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\NamespaceRootId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ConfiguredTenantId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\UserEmail
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\Business
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\SharePointOnPrem
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\FirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\EdpManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\RootAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\TenantAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\HasMadeFirstUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\IsUpgradeAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\CrashDetectionKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ForceLogUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\EnableADALForSilentBusinessConfig
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LastKnownCloudFilesEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\FirstRunSignInOrigin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ExpressSignInCompletedState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LatestSignInStack
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\WamWebAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneAuthAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthUnrecoverableFailureTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthUnrecoverableFailureTag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthFallForwardEndTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneAuthClientIdUpperCase
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Business1\AuthenticationURLs
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Business1\Tenants
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneDriveDeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LastShutdownReason
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Business1\ScopeIdToMountPointPathCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\cid
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserEmail
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\Business
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\SharePointOnPrem
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EdpManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\RootAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\TenantAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\HasMadeFirstUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\IsUpgradeAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\CrashDetectionKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\ForceLogUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EnableADALForSilentBusinessConfig
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastKnownCloudFilesEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRunSignInOrigin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\ExpressSignInCompletedState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LatestSignInStack
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\WamWebAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneAuthAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneAuthClientIdUpperCase
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\AuthenticationURLs
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\Tenants
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneDriveDeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastShutdownReason
HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\ScopeIdToMountPointPathCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Program Files\Google\Chrome\Application\chrome.exe
HKEY_CURRENT_USER\Software\Classes\lnkfile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\Software\Classes\lnkfile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}\(Default)
HKEY_CURRENT_USER\Software\Classes\exefile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.exe\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\exefile\Clsid
HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects
HKEY_CURRENT_USER\Software\Classes\lnkfile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\Software\Classes\lnkfile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\.lnk\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{E357FCCD-A995-4576-B01F-234630154E96}\(Default)
HKEY_CURRENT_USER\Software\Classes\exefile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\.exe\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.exe\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\*\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\Software\Classes\*\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\exefile\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\.exe\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.exe\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\*\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\Software\Classes\*\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.txt
HKEY_CLASSES_ROOT\.txt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice\Hash
HKEY_CLASSES_ROOT\txtfile
HKEY_CURRENT_USER\Software\Classes\txtfile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.txt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\ShellEx\IconHandler
HKEY_CURRENT_USER\Software\Classes\.txt
HKEY_LOCAL_MACHINE\Software\Classes\.txt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\PerceivedType
HKEY_CLASSES_ROOT\SystemFileAssociations\text
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\ShellEx\IconHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.txt
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.txt
HKEY_CURRENT_USER\Software\Classes\txtfile\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\ShellEx\PropertyHandler
HKEY_CURRENT_USER\Software\Classes\.txt\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\ShellEx\PropertyHandler
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.txt\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\ShellEx\PropertyHandler
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\text\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\ShellEx\PropertyHandler
HKEY_CURRENT_USER\Software\Classes\txtfile\Clsid
HKEY_CURRENT_USER\Software\Classes\*\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\Software\Classes\*\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\DefaultIcon\(Default)
HKEY_CURRENT_USER\Software\Classes\txtfile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\.txt\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.txt\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\txtfile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\.txt\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.txt\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\text\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\txtfile\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\.txt\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.txt\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\text\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\CustomAttributes
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CCSelect\.current
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudExperienceHost
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudExperienceHost\Fullscreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudExperienceHost\Fullscreen\FullscreenCXHRunning
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.
HKEY_CLASSES_ROOT\.
HKEY_CLASSES_ROOT\.\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithProgids
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\UserChoice
HKEY_CLASSES_ROOT\Unknown
HKEY_CURRENT_USER\Software\Classes\Unknown\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.
HKEY_CURRENT_USER\Software\Classes\.
HKEY_LOCAL_MACHINE\Software\Classes\.
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.
HKEY_LOCAL_MACHINE\Software\Classes\SystemFileAssociations\.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.basta
HKEY_CLASSES_ROOT\.basta
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\(Default)
HKEY_CLASSES_ROOT\.basta\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.basta\OpenWithProgids
HKEY_LOCAL_MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Extensions\windows.fileTypeAssociation\.basta
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.basta
HKEY_CURRENT_USER\Software\Classes\.basta\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\Unknown\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\{000214F9-0000-0000-C000-000000000046}
HKEY_CLASSES_ROOT\SystemFileAssociations\.basta
HKEY_CURRENT_USER\Software\Classes\.basta
HKEY_LOCAL_MACHINE\Software\Classes\.basta
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\PerceivedType
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.basta
HKEY_LOCAL_MACHINE\Software\Classes\SystemFileAssociations\.basta
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\InstalledWin32AppsRevision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\BackgroundAppGlobalToggle
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Threading
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.TRGFGNEGRQ_8JRXLO3Q8OOJR!NCC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\RemoteServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\PUEBZR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJF.RKCYBERE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZFRQTR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\PZQ.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\ZFCNVAG.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\ABGRCNQ.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\FREIVPRF.ZFP
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\FAVCCVATGBBY.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\JVAQBJFCBJREFURYY\I1.0\CBJREFURYY.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\ERTRQVG.RKR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\CommandLine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\IdentityType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ActivatableClasses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ServerType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Identity
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ServiceName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExplicitPsmActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\CustomAttributes
HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}
HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\StoreInit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\StoreInit\AppExtensionPackageEventVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\Server
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$$windows.data.platform.partitioning.systempartitionindex\Current
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$$windows.data.platform.partitioning.systempartitionindex\Current\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\KnownFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$start.tilegrid$windows.data.curatedtilecollection.tilecollection\Current
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$start.tilegrid$windows.data.curatedtilecollection.tilecollection\Current\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CloudStore\SystemMetaData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\SystemMetaData\HasCuratedTileCollectionsInitialized
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\Characteristics
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0002
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0002\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0003
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0003\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0004
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0004\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0005
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0005\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0006
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0006\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0007
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0007\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0008
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0008\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0009
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0009\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Configuration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Configuration\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Properties
HKEY_CURRENT_USER\Software\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\Forward
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\TypeLib\Version
HKEY_CURRENT_USER\Software\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0\win64
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex
HKEY_CURRENT_USER\Software\Classes\TypeLib
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\Forward
HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\Forward
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\TypeLib\Version
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Network\NewNetworkWindowOff
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Network\NwCategoryWizard
HKEY_CURRENT_USER\Software\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\TypeLib
HKEY_CURRENT_USER\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}
HKEY_CURRENT_USER\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Control Panel\Settings\Network
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Settings\Network\AlwaysConnectedSysTrayExperience
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1A10
HKEY_LOCAL_MACHINE\Software\Microsoft\IdentityStore\LoadParameters\{B16898C6-A148-4967-9171-64D755DA8520}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LoadParameters\{B16898C6-A148-4967-9171-64D755DA8520}\LoginUri
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LoadParameters\{B16898C6-A148-4967-9171-64D755DA8520}\EnterpriseAuthorityUri
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AAD\Package
HKEY_USERS\S-1-5-21-3747987639-2506909737-3802746916-1001
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Classes\CLSID\{C53E07EC-25F3-4093-AA39-FC67EA22E99D}
HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Unknown\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\.basta\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\.basta\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\Unknown\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_USERS\S-1-5-21-3747987639-2506909737-3802746916-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3747987639-2506909737-3802746916-1001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3747987639-2506909737-3802746916-1001\ProfileImagePath
HKEY_CLASSES_ROOT\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\SortOrderIndex
HKEY_CLASSES_ROOT\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_CLASSES_ROOT\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}\Instance
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\MonitorRegistry
HKEY_CLASSES_ROOT\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\CallForAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\RestrictedAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\FolderValueFlags
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{2227A280-3AEA-1069-A2DE-08002B30309D}
HKEY_CLASSES_ROOT\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\Instance
HKEY_CLASSES_ROOT\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2227A280-3AEA-1069-A2DE-08002B30309D}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\PrintersAndFaxes\NameSpace
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PrintersAndFaxes\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\PrintersAndFaxes\NameSpace\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PrintersAndFaxes\NameSpace\DelegateFolders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\PrintersAndFaxes\NameSpace
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\PrintersAndFaxes\NameSpace\DelegateFolders
HKEY_CLASSES_ROOT\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\ShellFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\CallForAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\RestrictedAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\FolderValueFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsFORDISPLAY
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HideFolderVerbs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\UseDropHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsFORPARSING
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsParseDisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\QueryForOverlay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\MapNetDriveVerbs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\QueryForInfoTip
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HideOnDesktopPerUser
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsAliasedNotifications
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsUniversalDelegate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoFileFolderJunction
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\PinToNameSpaceTree
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HasNavigationEnum
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\EnableThumbnails
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoDefaultToFS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\ParseDisplayNameNeedsURL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\BlockNewFile
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoInitRequired
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\SafeRootForMTA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsSendToTarget
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoLocalizedNameInTarget
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\ShellFolder
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\ShellFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}
HKEY_CLASSES_ROOT\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\PrintHood
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\NameSpace
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\NameSpace\DelegateFolders
HKEY_CLASSES_ROOT\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\Instance
HKEY_CLASSES_ROOT\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}
HKEY_CLASSES_ROOT\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\Instance
HKEY_CLASSES_ROOT\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{35786D3C-B075-49B9-88DD-029876E11C01}
HKEY_CLASSES_ROOT\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\Software\Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\Instance
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\Instance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\
HKEY_CURRENT_USER\Software\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\TreatAs
HKEY_CURRENT_USER\Software\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\mstsc.exe,-4000
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\SnippingTool.exe,-15051
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\psr.exe,-1701
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\FXSRESM.dll,-114
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\syswow64\wmploc.dll,-102
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en
HKEY_CLASSES_ROOT\Applications\SnippingTool.exe
HKEY_CLASSES_ROOT\Applications\psr.exe
HKEY_CLASSES_ROOT\Applications\WFS.exe
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\RecoveryDrive.exe,-500
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Taskmgr.exe,-32420
HKEY_CLASSES_ROOT\Applications\taskmgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\taskmgr.exe\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\taskmgr.exe\NoStartPage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.ZVPEBFBSGFGVPXLABGRF_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJF.FRPURNYGUHV_PJ5A1U2GKLRJL!FRPURNYGUHV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFPNYPHYNGBE_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFSRRQONPXUHO_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFZNCF_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.KOBKTNZVATBIREYNL_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.NHGBTRARENGRQ.{19RP9782-4RQR-P19S-08S2-3N612PRPSR68}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.ini
HKEY_CLASSES_ROOT\.ini
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\UserChoice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\UserChoice\Hash
HKEY_CLASSES_ROOT\inifile
HKEY_CURRENT_USER\Software\Classes\inifile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.ini
HKEY_CURRENT_USER\Software\Classes\.ini
HKEY_LOCAL_MACHINE\Software\Classes\.ini
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\PerceivedType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateOnHostFlags
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Search\Preferences
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Search\Preferences
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Search\Preferences\WriteLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\ClientPipeName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\{e357fccd-a995-4576-b01f-234630154e96}
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU Size
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlot
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Logo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Shell\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Shell\Bags\AllFolders\Shell
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WideLogo
HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Documents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonMusic
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonPictures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonVideo
HKEY_CLASSES_ROOT\CLSID\{9E175B8B-F52A-11D8-B9A5-505054503030}\ExtendedErrors
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SortOrderIndex
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HubMode
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}
HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\quickassist.exe,-806
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\comres.dll,-3410
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\mycomput.dll,-300
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\dfrgui.exe,-103
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\miguiresource.dll,-101
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\System32\AuthFWGP.dll,-20
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\iscsicpl.dll,-5001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\MdSched.exe,-4001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\syswow64\odbcint.dll,-1693
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\odbcint.dll,-1694
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10021
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\regedit.exe,-16
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10030
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\filemgmt.dll,-2204
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msconfig.exe,-5006
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msinfo32.exe,-100
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\miguiresource.dll,-201
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.10
HKEY_CLASSES_ROOT\.10
HKEY_CLASSES_ROOT\.10\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.10\OpenWithProgids
HKEY_LOCAL_MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Extensions\windows.fileTypeAssociation\.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.10
HKEY_CLASSES_ROOT\SystemFileAssociations\.10
HKEY_CURRENT_USER\Software\Classes\.10
HKEY_LOCAL_MACHINE\Software\Classes\.10
HKEY_CURRENT_USER\Software\Classes\SystemFileAssociations\.10
HKEY_LOCAL_MACHINE\Software\Classes\SystemFileAssociations\.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\ShellFeedsTaskbarContentUpdateMode
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\SystemUsesLightTheme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\CustomAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\14d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\14d\PackageOrigin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag\ThisPCPolicy
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3747987639-2506909737-3802746916-1001\fdeploy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4900540-2379-4C75-844B-64E6FAF8716B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag\BaseFolderId
HKEY_CURRENT_USER\Software\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
HKEY_LOCAL_MACHINE\Software\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
HKEY_CURRENT_USER\Software\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
HKEY_CURRENT_USER\Software\Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InProcServer32
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InProcServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag
HKEY_CURRENT_USER\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\explorer.exe,-7023
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\FirstProfileSeenTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\AdminCapabilities
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\cloudExperienceHost
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\BackupReminderToastCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DiskSpaceChecking\LastInstallTimeLowStorageNotify
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\LastTimeBackupReminderNotify
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CCSelect\.Current\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
HKEY_CURRENT_USER\Software\Classes\AppID\{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\MGOTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProcessMitigationPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LaunchPermission
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProtectionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppID
HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\Elevation
HKEY_CURRENT_USER\Software\Classes\Interface\{75121952-E0D0-43E5-9380-1D80483ACF72}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}
HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\AppID
HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\Elevation
HKEY_CURRENT_USER\Software\Classes\AppID\slui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\slui.exe\AppId
HKEY_CURRENT_USER\Software\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
HKEY_CURRENT_USER\Software\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\AppID
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\Elevation
HKEY_CURRENT_USER\Software\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\ProxyStubClsid32
HKEY_CURRENT_USER\Software\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\Forward
HKEY_CURRENT_USER\Software\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\TypeLib\Version
HKEY_CURRENT_USER\Software\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win64
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\UDTAlignmentPolicy
HKEY_CURRENT_USER\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\AppID
HKEY_CURRENT_USER\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\Elevation
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\UseHVSocket
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ProductOptions\OSProductPfn
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Ole\FeatureDevelopmentProperties
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Ole
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft
HKEY_CURRENT_USER\Software\Classes\Local Settings
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133EAC4F-5891-4D04-BADA-D84870380A80}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\MGOTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ProcessMitigationPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LoadUserSettings
HKEY_USERS\.DEFAULT\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ProtectionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133EAC4F-5891-4D04-BADA-D84870380A80}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\Elevation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{839D7762-5121-4009-9234-4F0D19394F04}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{839D7762-5121-4009-9234-4F0D19394F04}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{839D7762-5121-4009-9234-4F0D19394F04}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\LocalServer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\Elevation
HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135FD325-45B7-4C30-89F8-4386961669F0}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-E0D0-43E5-9380-1D80483ACF72}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}

Read Registry Keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\LdapClientIntegrity
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\UseOldHostResolutionOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\UseHostnameAsAlias
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\RecvBufferSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\es-ES
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\es-ES
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\es-ES\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\es-ES
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\es
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE1C7110-2F60-11D3-8A39-00C04F72D8E3}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders\StorageDelegateSuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders\StorageDelegate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{04731B67-D933-450a-90E6-4ACD2E9408FE}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b934b42-522b-4c34-bbfe-37a3ef7b9c90}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{89D83576-6BD1-4c86-9454-BEB04E94C819}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9343812e-1c37-4a49-a12e-4b2d810d956b}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a00ee528-ebd9-48b8-944a-8942113d46ac}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{daf95313-e44d-46af-be1b-cbacea2c3065}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e345f35f-9397-435c-8f95-4e922c26259e}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EDC978D6-4D53-4b2f-A265-5805674BE568}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8278c54-a712-415b-b593-b77a2be0dda9}\SortOrderIndex
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\SortOrderIndex
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\CLSID
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\Attributes
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\DescriptionID
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\HelpTopic
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\RecursiveSearch
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\HideNonRemovableDrives
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\UseRemovableStorageRegPath
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\UseRemovableDrivesRegPath
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\NoDelegateSearchRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\HideNonStorageServiceMountedDrives
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\ForceAllDrivesRemovable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance\InitPropertyBag\ShowAllOpticalDevices
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{df653500-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NeverShowDrivesMask
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideDrivesWithNoMedia
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2c670971-2e31-11ef-9daa-806e6f6e6963}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives\Volume{2c670971-2e31-11ef-9daa-806e6f6e6963}\IsImapiDataBurnSupported
HKEY_CURRENT_USER\Software\Classes\Directory\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
HKEY_CURRENT_USER\Software\Classes\Directory\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
HKEY_CURRENT_USER\Software\Classes\Directory\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
HKEY_CURRENT_USER\Software\Classes\Directory\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\Directory\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.jpg
HKEY_CURRENT_USER\Software\Classes\.jpg\Content Type
HKEY_CURRENT_USER\Software\Classes\.jpg\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice\Hash
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\DocObject
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\BrowseInPlace
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\IsShortcut
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\IconHandler\(Default)
HKEY_CURRENT_USER\Software\Classes\lnkfile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\DocObject
HKEY_CURRENT_USER\Software\Classes\lnkfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\CLSID\(Default)
HKEY_CURRENT_USER\Software\Classes\lnkfile\IsShortcut
HKEY_CURRENT_USER\Software\Classes\lnkfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\AlwaysShowExt
HKEY_CURRENT_USER\Software\Classes\lnkfile\NeverShowExt
HKEY_CURRENT_USER\Software\Classes\microsoft-edge\URL Protocol
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpkywr67r0wf5bhddtfg25nmc88t8x2q3
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX6g3bxy0n6cf5c4c2129qkw7sretb4ssh
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXb4mqh9pxya93ap1mw036pvy5tbeddrvg
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXs9b9q0m03vbnjxt30ypbtq2ftebfvg7t
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX7cky5w40tqp2xxs6b72exyvsttezngeb
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXryngjssvhcjfeyab24rg8q5zderqsjym
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXn9nvas4e60xvcswfx8rjqpvd2hb4e04v
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1cgv28nm26nmck3p06fenv4mz3f5kc89
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXbpvt3ybb9z170k77w6aygrkk3dpbx7mb
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4rkxz9wxfwydqgfq1te5fwj9sp62tt2s
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpvggj8wtagvqq1trs4afp513ydqb63tt
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Windows.PrintDialog_6.2.1.0_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.PrintDialog\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpb2rprh78ppcr2kwetykjxfzjgj219r0
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXzeyx06t5hke6zf29z17sh4594fevh64m
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxevv7w4echwe3sagycz14jet3p1yv42y
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX25rf19q671kf1xxjz0gq5zzj6p2cvggj
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXm9cv9mbrjpp9bzhz5hp4kfhkge633vmf
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXa824bp5bsv8tjsvn1pd1gjfktpk8z4wk
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXzqzjchey2xvwqp5nq4grdst6n41vq0q8
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4x2vc5g4p8m2g02hxkhw0fzwy95v8884
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX965kgq2vdagyyvkr19xz1tznhv8zk22p
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXdknxgvjetxtjg5qstqavf87td6r5mggf
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\OneDrive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXg8y9gbj2acqy3f00ze6xvyggrn4gx52h
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGamingOverlay_7.124.5142.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX103r29wfxg0qfv27rc6g1266p80etspv
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftSolitaireCollection_4.19.5100.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX3nfyrvh5v44keypr93rap915a4x4wf9e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.StorePurchaseApp_22403.1401.1.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhx21prcvqqa8a90yc551k1ed62rnhscm
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Getstarted_10.2312.1.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXad7xaxkz654153ytb1w9g15v02w69ysc
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.manageaccounts\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXqtfb4sfp80ndeef397vvdsm1cxa2zmqh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.calendar\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXr740585a8f3pa1xj9yvw1nbmdhvxw0jw
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\microsoft.windowscommunicationsapps_16005.14326.21962.0_x64__8wekyb3d8bbwe\microsoft.windowslive.mail\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXywx2qkz1wry05ezvs9t7s1d5myqq57nb
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MicrosoftOfficeHub_18.2405.1221.0_x64__8wekyb3d8bbwe\Microsoft.MicrosoftOfficeHub\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXveh2ktf0zxzfhebt0a4dk2gt25zs2zpn
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX65rt952nmtan0wae8jjfq9ezj57wrcz3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxkpqhfe034exe7w50trnmgx7jf2njew0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXcgsgh5jyp73m2mqpj1khbpa00n9zjx5e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.MixedReality.Portal_2000.21051.1282.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0b068fkjwjba9hca74gzgb41ga6hewj5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Microsoft3DViewer_7.2405.12012.0_x64__8wekyb3d8bbwe\Microsoft.Microsoft3DViewer\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX2fj1syzmys46t5caejk0kchmrqkm5p68
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_15.120.3207.0_x64__kzf8qxf38zg5c\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXtn4aknrnefvk9qxg5v3n0w729jhp2nh9
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXxmcv2e4p0wphv9yc6rfsvra1jfh6yspe
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ScreenSketch_10.2008.3001.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhym7ek6y6n47b31ntwhydd20ga438ze4
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneMusic_11.2405.8.0_x64__8wekyb3d8bbwe\Microsoft.ZuneMusic\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXv93e4smt0fnhea515bkrj4a3r5b7eymh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.GetHelp_10.2403.20861.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX2h7vrw97tk8aw2thnyw4smtp3a9h8msj
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsSoundRecorder_10.2103.28.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfccg2tj4e1nseqsnjk27atjjrkwewak2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX93zfxnv53xw2egcj6y1b3cybn7jsdvqy
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.AAD.BrokerPlugin_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXc0s86w2wtvq6haj4qdsx6d39n6gjnd25
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXymzghaemwkveyxv10s2sdpvh29xd826s
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.19041.4239_neutral__cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1m43v2pes5tjk9j68m6hbj9ns4t1vdpz
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXc0bbpcmbkgwnb1f2n93th99dx5sfhhxz
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\ShellFeedsUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX8qw75jw691z4w1ky847v1hkvv3jr77gp
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Search_1.14.15.19041_neutral_neutral_cw5n1h2txyewy\CortanaUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX832xa6v73scngkfqneeyweq93bydyndc
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\WindowsBackup\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpf910bs9b2wrpn7q5wy0zf43trqradpv
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\ScreenClipping\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXnt0vy7mv5v708p3m7t099fpb513h1z6q
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\MicrosoftWindows.Client.CBS_1000.19058.1000.0_x64__cw5n1h2txyewy\InputApp\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXw5w6xq8n6aftnek5snsh0rkqhvj6f2p4
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.XboxGameCallableUI_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\Microsoft.XboxGameCallableUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX4p4zvrn9j49073c60wm0cz37a6jkpxf6
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\Microsoft.Windows.XGpuEjectDialog\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX9a850kvzvsgyncqn3jz8a7ncp5wysag3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.SecHealthUI_10.0.19041.4239_neutral__cw5n1h2txyewy\SecHealthUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfvprxfzapdmm9t1aaxajchrn44c24ja5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.ParentalControls_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXga5x2qpq92trzbb61see2b87mkw9mw8e
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX67q2rpn2mfpeka4966fq92zw3cj57qh0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ECApp_10.0.19041.4239_neutral__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0dem14bzwfr4yx19b55q76wgznh9yrz2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXpjq7xfsk6xawd0pnzgvjxyskhc5t02gg
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.People_10.2202.100.0_x64__8wekyb3d8bbwe\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXq9hr4jc4mqaw6ba1vkftrfb6patk8g4d
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.ZuneVideo_10.22091.10061.0_x64__8wekyb3d8bbwe\Microsoft.ZuneVideo\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXbt8frk9dqjm57630bcdbjwt83fzq6qpa
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsAlarms_11.2403.8.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXgzzfreat371nkms9k7gpb45n6ha46qgn
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Xbox.TCUI_1.24.10001.0_x64__8wekyb3d8bbwe\Microsoft.Xbox.TCUI\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX1c8ewzb0d3argyb68es59f3a99fjgbdh
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.BingWeather_4.53.61401.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXfjyxv98bc0jz2yrs0z0j792g76qr92sf
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsMaps_11.2403.4.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX8f72qqeyxa5t2qazxnv6rh1c2s6gyck5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\winget\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXhk6y9hf580hrpp1sq59tazqj0rdgfcs2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXrth4b5h2w80n0h0thbhz44bgw6sr7ds2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.DevHome_0.1600.561.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXrc7e2kd0w5cr9we4t8et5h113yf15jp1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.YourPhone_1.24061.93.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXyd2yw31293dh3yzq3dbzy04nsgmmqgsy
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsStore_22406.1401.6.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX74k68hrjdcxqw97jd4v0x9fn7f2wbcb1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsCamera_2024.2405.19.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppXw8k2rpa7wcqcddjh8h8dntv0r2yffs63
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.WindowsFeedbackHub_1.2405.21481.0_x64__8wekyb3d8bbwe\App\Capabilities\URLAssociations\microsoft-edge
HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications\AppX0y6wwzf0q1pkzvarr8fjfh3e76gcaek5
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Office.OneNote_16001.14326.21942.0_x64__8wekyb3d8bbwe\microsoft.onenoteim\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\File Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Address Book
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Contacts\Address Book\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Disc Image Burner
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Search
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Internet Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Paint
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Notepad
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Wordpad
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Media Player
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Player\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Windows Photo Viewer
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Microsoft Edge
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Hidden
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Google Chrome
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\microsoft-edge
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\VLC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge\UserChoice\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\NoStaticDefaultVerb
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open\NeverDefault
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open\FriendlyAppName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarSmallIcons
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\Flighting\Current
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\Flighting\0\SearchBoxWidth\Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SearchBoxThreshold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\ImmersiveSearch
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\IsFeedsAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\HeadlinesOnboardingComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\EnShellFeedsTaskbarViewMode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4234d49b-0245-4df3-b780-3893943456e1}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\NoOplock
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\UseOutOfProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\EnableShareDenyNone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1ab\InstalledLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1ab\MutableLink
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\PolicyType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\Behavior
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\MergeAlgorithm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\RegKeyPathRedirectMapped
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\RegKeyPathRedirect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\grouppolicyname
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataDevice
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\ADMXMetadataBoth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\65Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\EDPShowIcons\Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\DataProtection\EDPShowIcons
HKEY_CURRENT_USER\Software\Classes\.png\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.png
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.png\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\NoOplock
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\UseOutOfProcHandlerCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\Zvpebfbsg.Jvaqbjf.FuryyRkcrevraprUbfg_pj5a1u2gklrjl!Ncc
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{031E4825-7B94-4DC3-B131-E946B44C8DD5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{59031A47-3F72-44A7-89C5-5595FE6B30EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{59031A47-3F72-44A7-89C5-5595FE6B30EE}
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\System.HideOnDesktop
HKEY_CURRENT_USER\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{018D5C66-4533-4307-9B53-224DE2ED1FE6}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\LocalizedString
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.FileAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64693913-1c21-4f30-a98f-4e52906d3b56}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemNameDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.DateModified
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.Kind
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemPathDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemPathDisplayNarrow
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderNameDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderPathDisplay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00021401-0000-0000-C000-000000000046}\OverrideFileSystemProperties\System.ItemFolderPathDisplayNarrow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.jpg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.jpg\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\DisplayVersion
HKEY_CURRENT_USER\Control Panel\Desktop\PaintDesktopVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.Kind
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{1E3EE840-BC2B-476C-8237-2ACD1A839B22} 3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon\OpenIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{446D16B1-8DAD-4870-A748-402EA43D788C} 100
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.DateModified
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\System.ThumbnailCacheId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.exe\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\DisableProcessIsolation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\NoOplock
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\UseInProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\UseOutOfProcHandlerCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\DefaultIcon\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageOrigin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\PackageStatus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageFullName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageFamily
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\PackageType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Flags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Flags2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\Volume
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\OSMaxVersionTested
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\InstalledLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\MutableLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\MutableLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7d\TargetDeviceFamilyName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\CachedMergedResourcesPriFileName
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\Language
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.language-es_8wekyb3d8bbwe\Flags
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\Microsoft.Windows.Photos_8wekyb3d8bbwe\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Flags
HKEY_CURRENT_USER\Control Panel\International\User Profile\Languages
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\ManifestLanguagesList
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.photos_8wekyb3d8bbwe\ResourcesConfig\OverrideLanguagesList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateOnHostFlags
HKEY_CURRENT_USER\Control Panel\International\Geo\Nation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Classes\Local Settings\MrtCache\C:%5CProgram Files%5CWindowsApps%5CMicrosoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe%5Cmicrosoft.system.package.metadata%5CS-1-5-21-3747987639-2506909737-3802746916-1001-MergedResources-3.pri\1dac2362cae047c\cab94c9e\@{microsoft.windows.photos_2019.19071.12548.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/files/assets/photoslogoextensions.png}
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\Treatment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\Treatment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\Treatment
HKEY_CURRENT_USER\Software\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc\TypeOverLay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.jpg\TypeOverLay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\TypeOverLay
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\MainAccount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\UserFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\cid
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\NamespaceRootId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ConfiguredTenantId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\UserEmail
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\Business
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\SharePointOnPrem
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\FirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\EdpManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\RootAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\TenantAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\HasMadeFirstUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\IsUpgradeAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\CrashDetectionKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ForceLogUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\EnableADALForSilentBusinessConfig
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LastKnownCloudFilesEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\FirstRunSignInOrigin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\ExpressSignInCompletedState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LatestSignInStack
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\WamWebAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneAuthAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthUnrecoverableFailureTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthUnrecoverableFailureTag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\OneAuthFallForwardEndTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneAuthClientIdUpperCase
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\OneDriveDeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Business1\LastShutdownReason
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\cid
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserEmail
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\Business
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\SharePointOnPrem
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EdpManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\RootAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\TenantAddedToFavorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\HasMadeFirstUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\IsUpgradeAvailable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\CrashDetectionKey
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\ForceLogUpload
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EnableADALForSilentBusinessConfig
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastKnownCloudFilesEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRunSignInOrigin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\ExpressSignInCompletedState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LatestSignInStack
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\WamWebAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneAuthAccountId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneAuthClientIdUpperCase
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\OneDriveDeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastShutdownReason
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Program Files\Google\Chrome\Application\chrome.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellEx\{E357FCCD-A995-4576-B01F-234630154E96}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.txt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\UserChoice\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.txt\PerceivedType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.txt\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\SystemPropertyHandlers\.txt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\txtfile\DefaultIcon\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonArray\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\TrustLevel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudExperienceHost\Fullscreen\FullscreenCXHRunning
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.basta
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\PerceivedType
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\BackgroundAppGlobalToggle
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Threading
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.TRGFGNEGRQ_8JRXLO3Q8OOJR!NCC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\RemoteServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\PUEBZR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsInternal.Shell.UnifiedTile.CuratedTileCollections.CuratedTileCollectionManager\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJF.RKCYBERE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZFRQTR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\PZQ.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\ZFCNVAG.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\ABGRCNQ.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\FREIVPRF.ZFP
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\FAVCCVATGBBY.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\JVAQBJFCBJREFURYY\I1.0\CBJREFURYY.RKR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\ERTRQVG.RKR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\CommandLine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\IdentityType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ActivatableClasses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ServerType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Identity
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ServiceName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExplicitPsmActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\StoreInit\AppExtensionPackageEventVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\Server
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Storage.Cloud.CloudStore\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$$windows.data.platform.partitioning.systempartitionindex\Current\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$start.tilegrid$windows.data.curatedtilecollection.tilecollection\Current\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\SystemMetaData\HasCuratedTileCollectionsInitialized
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\Characteristics
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0002\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0003\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0004\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0005\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0006\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0007\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0008\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0009\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Configuration\NetCfgInstanceId
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B}\TypeLib\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B}\TypeLib\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Settings\Network\AlwaysConnectedSysTrayExperience
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformationPrivate\ActivateOnHostFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1A10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LoadParameters\{B16898C6-A148-4967-9171-64D755DA8520}\LoginUri
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityStore\LoadParameters\{B16898C6-A148-4967-9171-64D755DA8520}\EnterpriseAuthorityUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3747987639-2506909737-3802746916-1001\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\ValidateRegItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\MonitorRegistry
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\CallForAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\RestrictedAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\ShellFolder\FolderValueFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{2227A280-3AEA-1069-A2DE-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\CallForAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\RestrictedAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\FolderValueFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsFORDISPLAY
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HideFolderVerbs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\UseDropHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsFORPARSING
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsParseDisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\QueryForOverlay
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\MapNetDriveVerbs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\QueryForInfoTip
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HideOnDesktopPerUser
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsAliasedNotifications
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsUniversalDelegate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoFileFolderJunction
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\PinToNameSpaceTree
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\HasNavigationEnum
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\EnableThumbnails
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoDefaultToFS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\ParseDisplayNameNeedsURL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\BlockNewFile
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoInitRequired
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\SafeRootForMTA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\WantsSendToTarget
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\ShellFolder\NoLocalizedNameInTarget
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\PrintHood
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\Attributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\DescriptionID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\HelpTopic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\AllowChildAliasRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\RecursiveSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance\InitPropertyBag\TargetKnownFolder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\ImmersiveControlPanel\systemsettings.exe,-650
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\mstsc.exe,-4000
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\SnippingTool.exe,-15051
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\psr.exe,-1701
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\FXSRESM.dll,-114
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\syswow64\wmploc.dll,-102
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\RecoveryDrive.exe,-500
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Taskmgr.exe,-32420
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\taskmgr.exe\NoStartPage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.ZVPEBFBSGFGVPXLABGRF_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJF.FRPURNYGUHV_PJ5A1U2GKLRJL!FRPURNYGUHV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFPNYPHYNGBE_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFSRRQONPXUHO_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.JVAQBJFZNCF_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.KOBKTNZVATBIREYNL_8JRXLO3Q8OOJR!NCC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\ZVPEBFBSG.NHGBTRARENGRQ.{19RP9782-4RQR-P19S-08S2-3N612PRPSR68}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.ini
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\Content Type
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\UserChoice\ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\UserChoice\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ini\PerceivedType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\inifile\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Search.ContentIndexer\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Search\Preferences\WriteLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\ClientPipeName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU Size
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlot
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Logo
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WideLogo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Documents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonMusic
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonPictures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\CommonVideo
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HubMode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\quickassist.exe,-806
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\comres.dll,-3410
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\mycomput.dll,-300
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\dfrgui.exe,-103
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\miguiresource.dll,-101
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\System32\AuthFWGP.dll,-20
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\iscsicpl.dll,-5001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\MdSched.exe,-4001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\syswow64\odbcint.dll,-1693
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\odbcint.dll,-1694
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10021
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\regedit.exe,-16
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10030
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\filemgmt.dll,-2204
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msconfig.exe,-5006
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msinfo32.exe,-100
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\miguiresource.dll,-201
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap\.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds\ShellFeedsTaskbarContentUpdateMode
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\SystemUsesLightTheme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\14d\PackageOrigin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag\ThisPCPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag\BaseFolderId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\explorer.exe,-7023
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\(Default)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\FirstProfileSeenTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.System.UserProfile.UserProfileEngagementManager\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\CloudExperienceHostBroker.SyncEngine.OOBEOneDriveOptin\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\cloudExperienceHost
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivationType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\DllPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Threading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\TrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\RemoteServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateAsUser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInSharedBroker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInBrokerForMediumILContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Permissions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32\ThreadingModel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\BackupReminderToastCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DiskSpaceChecking\LastInstallTimeLowStorageNotify
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\BackupReminder\LastTimeBackupReminderNotify
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CCSelect\.Current\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\MGOTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProcessMitigationPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProtectionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\slui.exe\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\TypeLib\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{76D90824-E735-4844-B26F-AA1235B6E76B}\TypeLib\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA}\1.0\0\win64\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\UDTAlignmentPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\UseHVSocket
HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId4
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ProductOptions\OSProductPfn
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\MGOTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ProcessMitigationPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\ProtectionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{133eac4f-5891-4d04-bada-d84870380a80}\AccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{839D7762-5121-4009-9234-4F0D19394F04}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\ActivateOnHostFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{135fd325-45b7-4c30-89f8-4386961669f0}\(Default)

Modified Registry Keys

HKEY_CLASSES_ROOT\.basta\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.basta\DefaultIcon\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\Zvpebfbsg.Jvaqbjf.FuryyRkcrevraprUbfg_pj5a1u2gklrjl!Ncc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop\IconLayouts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop\IconNameVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\InstalledWin32AppsRevision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${f2f37d53-2bec-4ac6-8019-0f8d8d548125}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current\Data
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\Taskmgr.exe,-32420
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\comres.dll,-3410
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\mycomput.dll,-300
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\dfrgui.exe,-103
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\miguiresource.dll,-101
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\System32\AuthFWGP.dll,-20
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\iscsicpl.dll,-5001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\MdSched.exe,-4001
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\odbcint.dll,-1694
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10021
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\regedit.exe,-16
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\wdc.dll,-10030
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msconfig.exe,-5006
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4\63C768CF\@C:\Windows\system32\msinfo32.exe,-100

Deleted Registry Keys Nothing to display.

Resolved APIs Nothing to display.